You are here

SkyVault 2.0 ยป Administering

Setting up SkyVault authentication and security

The first time you access a vanilla SkyVault installation, you can identify yourself by entering a new user name and password in the Login screen. If you log in with the credentials of a user with administrator privileges, you can create additional users and assign them passwords.

In this out-of-the-box set up, you can manage the user base and their passwords manually from within SkyVault.

From here, there are a number of common customizations you might want to make to scale up to the needs of a larger enterprise. For example, you might want to:

  • Enable automatic sign-on using operating system credentials or a Single Sign-On (SSO) server to remove the need for a Login page
  • Delegate authentication responsibility to a central directory server to remove the need to set up users manually
  • SkyVault security SkyVault security comprises a combination of authentication and authorization.
  • Authentication subsystems Authentication is one of the categories of the SkyVault subsystem. An authentication subsystem is a coordinated stack of compatible components responsible for providing authentication and identity-related functionality to SkyVault.
  • SkyVault authentication chain The authentication subsystem types allow you to integrate SkyVault with the authentication servers in your environment. However, if integrating SkyVault with only one of these systems is not sufficient, you might want to combine multiple authentication protocols against a collection of servers.
  • Authorities Authorities are people (or persons) or groups.
  • Defining permissions Permissions and their groupings are defined in an XML configuration file.
  • Access Control Lists An Access Control List (ACL) is an ordered list of one or more Access Control Entries (ACE). An ACE associates a single authority to a single permission group or permission, and states whether the permission is to be allowed or denied. All nodes have an associated ACL.
  • Modifying access control Modifying access control can involve changing definitions, adding services, defining types and aspects, or adding definitions to new or existing security interceptors.
  • Public services Security is enforced around public services. Web services, web scripts, SkyVault Share, CIFS, WebDAV, FTP, CMIS, and more, all use public services, and therefore include security enforcement.
  • Implementation and services SkyVault enforces security services for managing authentication information. This section provides detailed information about the security services used in SkyVault and their implementation.
  • Admin password in default authentication This topic explains how the password for the Admin user is used by the default authentication system.
  • Security policies and filters You can configure a number of policies and filters in SkyVault Share to mitigate security attacks.
Parent topic: Administering

© 2017 TBS-LLC. All Rights Reserved.