[ Pobierz całość w formacie PDF ]
.This scriptdrive H: in a workstation s configura-may contain commands to assign usage andtion, and the physical drive may be in taccess rights to the user, initialize the user sanother room or building.ulocal environment on the network (loaddrivers, change directories, and so forth),vLoginmap network drives for the user s environ-A login is a process by which a workstation wment, and execute programs or otheror terminal makes itself known to a servercommands.xor host, and the workstation s user makesyz564 Login ScriptThree classes of login scripts areLogin Restrictionsdistinguished:The login restrictions that can be set to limitContainer, or System: The systema user s ability to log in to a network fallscript is created by the network admin-into any of several management areas:istrator.It is used to set general param-Security: Requiring a user ID and a pass-eters and mappings and to executeword helps control network access.commands that are appropriate for allThe details surrounding passwordusers.In NetWare 3.x, the systemrequirements may vary.For example,script is server-specific, which meansusers may be allowed (or required) tothat all users who log in to the serverchange their passwords every so often.will have the server s system script exe-Users may be limited in the numbercuted.In NetWare 4.x, the systemof incorrect passwords they can typescript is a property of a containerbefore being shut out of the network.object, so that all users in the containerget the system script.The container, orConfiguration: If memory usage or othersystem, login script is executed first.system requirements are of concern,users may have limited access.ForUser: The user script belongs to anexample, a login restriction may limitindividual user, and it does whateverthe amount of disk space a user isremains to be done to initialize theallowed to use.environment for a particular user.Accounting: Various accounting restric-Profile: In the NetWare Name Servicetions can be imposed.For example,(NNS) and in NetWare 4.x, the profilerestrictions may apply to the account sscript initializes the environment fortotal access time, amount of time open,all the users in a group.If defined, suchrange of hours during which it isa script executes between the systemaccessible, or number and range ofand user script.machines from which it is accessible.If a configuration includes a system loginscript, this script is executed before eitherLogin Scriptprofile or user scripts.In Novell s NetWare, a login script is aLogins from Remote Locationssequence of commands executed when auser wants to log in to a network.TheseRemote access refers to logins from remotecommands will initialize a node s and alocations.These login procedures areuser s operating environments, map direc-accomplished by dialing into an accesstories, allocate resources, and perform otherserver (a special modem or computer) andstartup tasks for the user.logging in through this server.Long-Haul Carrier 565The network modems that can be used as 2.Checks in with the privilege service toaremote access servers must have an NIC get the user s PAC (Privilege Attributecompatible with the network to which the Certificate).bmodem is providing access.Once the user has the PAC, he or she cancuse the network s facilities to the extentLogin Serviceallowed in the PAC.dTo increase security, any or all of theA login service is a tool for simplifying theeinformation can be encrypted at any or all oflogin and authentication processes for users.the login phases.The encryption methodsThe service consists of four main compo-fcan be different for each of the phases, ifnents, which reside on different machines.gdesired.Client software, which runs on the cli-With the authentication and security pos-hent s workstation, and which the clientsible when using a login service, SSO (singlecan use to access the network andsign on) becomes a real possibility.In SSO, aibegin the login process.user needs to have only a single user ID andjpassword to access any part of a networkServer software, which runs on the tar-allowed to the user.get machine, and which will evaluatekthe user s authenticity and privilegeslbefore providing access to theLogoutrequested services.mA logout is a process by which a user sAuthentication service, which verifies session on a network or a host is closednthat the user logging in is legitimate down and terminated in an orderly fashion.and is allowed on the network.If so, The user s workstation or terminal may beothe authentication service gives the removed as an active node on a network.puser a special ticket that serves as an The workstation may remain physicallyID [ Pobierz całość w formacie PDF ]