A central repository can also simplify the process of responding to new security
requirements for one or more tape libraries. For instance, rules for passwords can
be changed in one location without reconfiguring multiple, affected machines. By
comparison, when local authentication is employed, each individual machine
maintains an internal database of user IDs, with corresponding passwords and
roles.
LDAP dependency
The WebSphere Federated Repositories component of the SSPC or TPC receives
authentication requests from the TS3500 Tape Library through the SAS. The SAS
passes user ID and password information to the LDAP or AD server. The LDAP or
AD server returns authentication status to the SSPC or TPC, which forwards the
authentication status through the SAS to the TS3500 Tape Library. The LDAP or
AD server attached to the SSPC or TPC manages the following information:
User ID
A string to identify a specific user
User password
A password for each user ID
Groups
Strings to identify one or more groups of users. The TS3500 Tape Library
maps each LDAP group to a TS3500 Tape Library role.
Each user is defined as a member of one or more groups, meaning the user
assumes the roles defined by those groups.
Notes:
v The User ID and User password cannot exceed 15 characters. LDAP users that
exceed this maximum may not be able to authenticate to the TS3500 Tape
Library Specialist Web interface when SAS is enabled.
v The maximum length of a Group is 15 characters. Groups exceeding 15
characters in length will not map to a defined role in the TS3500 Tape Library.
Browsers
Customer Network Customer Network Customer Network
LDAP Server
SSPC or TPC
Server
Tivoli
Integrated
Portal (TIP)
LDAP
LDAP Service
a69i0356
Storage
Authentication
Service Server
Firmware
TS3500 Tape Library
Storage
Authentication
Service Client
Web Server
Figure 17. Storage Authentication Service overview
Chapter 1. Introduction 75
To Next Page
Loading...
Need help?
General