Vector PC-Duo Technical Information download pdf (Page 65)

Host Operation

 Modify Licenses determines whether a Master user or group can add license keys via

Add License button on the About tab.

 Read Permissions determines whether a Master user or group can view the Settings

Security tab of the Host Security Settings window.

 Change Permissions determines whether a Master user or group can modify

permissions on the Settings Security tab.

 Take Ownership determines whether a Master user or group can take ownership.

 View Gateway Configurations determines whether a Master user or group can read the

settings on the Gateways tab.

 Modify Gateway Configurations determines whether a Master user or group can modify

the settings on the Gateways tab.

Shared secret password authentication

If the Host security is set to Windows Authentication but the Host is not in the same

domain as a known the Gateway (i.e. a Gateway listed on the Gateways tab), Windows

Authentication will fail (the Host cannot authenticate the Gateway account credentials if

domain controller with Active Directory is not accessible).

To get around this problem without requiring any manual configuration management on

the Host machine, the Host and the Gateway are programmed to automatically establish

a 16-byte secret password between each other called a „shared secret password‟. This

secret is established behind the scenes when the Host and the known Gateway first

communicate with each other, and is unique to each the Gateway - Host pair.

NOTE: During this initial connection, the Host implicitly trusts the Gateway because it is

on the known Gateways list. For stronger authentication, use SSL to confirm the identity

of the Gateway.

On all subsequent connection attempts when the Host and the Gateway are not in the

same domain, the shared secret password will be presented and accepted for

authentication (because it is known only to the Host and the Gateway). No configuration

change is required and the Host security remains set at Windows Authentication for all

other requests.

This authentication method is ideal for the following situations:

 Host not installed before domain „RemoteControlGateway‟ account was created:

Previously, this account had to be added manually to the Host security settings (or some

other Gateway account had to be created and added to the Host security settings). As

long as the Gateway is on the known list of the Gateways on the Host‟s Gateways tab, the

Host will automatically add that Gateway‟s user account to its security settings list with

full access rights. With this autoconfiguration feature, there is no longer any need to

manually add the default Gateway user account or to create and configure a new

Gateway user account on the Host.

 the Gateway requests a connection and Host security is set to Simple Password:

Previously, the Host did not ask for a password from the Gateway. Now, the Gateway will

be asked to share a secret password with the Host, and will be required to present it to

the Host for a connection request, even with Host security set to Simple Password.

1 2 ... 60 61 62 63 64 65 66 67 68 69 70 ... 146 147

Comments to this Manuals

No comments

Vector PC-Duo Technical Information Page 65

Comments to this Manuals

Related products and manuals for Servers Vector PC-Duo