You are here

SkyVault Community Edition 201704 » Administering » Setting up authentication and security » Configuring authentication subsystems

Configuring pass-through

The pass-through (passthru) subsystem can be used to replace the standard user database with a Windows server/domain controller, or list of servers, to authenticate users accessing SkyVault Community Edition. This saves having to create user accounts within SkyVault Community Edition.

The subsystem also supports optional NTLM Single Sign-On (SSO) functions for WebDav and SkyVault Share, and direct CIFS authentication for the CIFS server. This method of authentication is much more secure than simple LDAP-based authentication or form-based authentication.

Note: Only NTLM v1 is supported in this configuration. As NTLM v2 has been designed to avoid "man-in-the-middle" attacks, it would be impossible to use in this pass through style.
  • Domain level properties The passthru subsystem supports domain level properties.
  • Other pass-through properties The pass-through subsystem supports the following additional properties.
  • Domain mappings Domain mappings are used to determine the domain a client is a member of when the client does not specify its domain in the login request. If the client uses a numeric IP address to access the web server it will not send the domain in the NTLM request as the browser assumes it is an Internet address.
  • Example: customizing the pass-through subsystem The authentication capabilities offered by the ldap-ad subsystem type cannot support CIFS and NTLM authentication. Instead, you would have to use form-based login for all users, and only internal users could access CIFS. This is the compromise you would have to make if the directory server did not support any other authentication protocol. But for Active Directory, which also supports NTLM and Kerberos authentication, you can overcome this limitation by using either the Pass-through or the Kerberos subsystem types.
Parent topic: Configuring authentication subsystems

© 2017 TBS-LLC. All Rights Reserved.