 |
 |
 |
 |
|
 |
 |
User Authentication
User Authentication is the process where a user supplies credentials in the form a
username, password and user type (Server Administrator, Profile Administrator or
SurfStatsLive user) and gets authenticated by an Authentication Provider. An
Authentication Provider in general terms is some kind of user database that
provides information on whether information provided to identify a user is valid or
not.
To set up the type and location of the Authentication Provider run the
SurfStatsLive Global Setup application (Start – Programs – SurfStatsLive – Global
Setup) and click the Authentication tab. This application is automatically run after
the SurfStatsLive installation has completed, but can also be run any time
afterwards.
Administrators Authentication Provider
Server Administrators can either be validated by the local Windows user database
(called the SAM) on the local machine, the Active Directory of a Windows 2000
domain or by SurfStatsLive itself. A choice has to be made between the three
methods. The section SurfStatsLive Installation –Installing SurfStatsLive - Setting
up Authentication describes how to specify the Authentication Provider.
A Windows domain in (general administration terms) has the advantage that
different computers can share the same user database, lessening the
administrative task of duplicating the same user accounts on different computers.
The central database is stored on one or more computers called domain
controllers. Windows 2000 Domains make use of Active Directory, which provide
the Authentication Service through a provider called Lightweight Directory Access
Protocol (LDAP).
The SAM is the user database used locally by a Windows 2000/2003 computer
(when the computer is not part of a domain). It validates users trying to log in to
the computer. Users can be validated (allowed access) by the domain instead of
by the local SAM database when a computer joins a domain.
Please note: Prior to V1.14.0.0 of SurfStatsLive Profile Administrators used to be
authenticated by the same authentication provider as Server Administrators.
From V1.14.0.0 onwards SurfStatsLive itself authenticates Profile Administrators.
V2.3.0.0 of SurfStatsLive introduces SurfStatsLive authentication. This is the
easiest form of authentication to use where a username and password for Sever