Hitachi

JP1 Version 12 JP1/Data Highway - Server Administrator Guide


3.5.5 Authentication Rules

This subsection describes how to configure an authentication rule.

For details about the authentication rule, see B. Authentication Rule.

Organization of this subsection

(1) Creating an authentication rule

To create an authentication rule:

  1. In the sidebar area, click Authentication Rules and then Authentication Rules.

    The Authentication Rules window appears in the content area.

  2. Click the New Rule button.

    The New Authentication rule window appears.

    [Figure]

  3. Create an authentication rule.

    [Figure]

    The following table describes the items you specify.

    Table 3‒31: Settings for the authentication rule

    Item

    Description

    ACCEPT and DENY radio buttons

    • ACCEPT

      Select this radio button to accept the specified rule.

    • DENY

      Select this radio button to reject the specified rule.

    Group drop-down list box

    Select a group that the rule applies to.

    Network set drop-down list box

    Select a network set that the rule applies to.

    Authentication Policy drop-down list box

    Select an authentication policy to be applied.

  4. Click the Create button.

    The authentication rule is created, and a dialog box appears indicating the rule is registered.

  5. Click the OK button.

    The Authentication Rules window appears.

(2) Editing an authentication rule

To edit an authentication rule:

  1. In the sidebar area, click Authentication Rules and then Authentication Rules.

    The Authentication Rules window appears in the content area.

  2. Click the menu icon ([Figure]) of the authentication rule you want to edit, and then select Edit.

    The Edit Authentication rule window appears.

    [Figure]

  3. Change the settings. For details about each item, see 3.5.5(1) Creating an authentication rule.

  4. Click the Update button.

    The authentication rule settings are updated, and a dialog box appears indicating the updated rule is registered.

  5. Click the OK button.

    The Authentication Rules window appears.

(3) Activating, inactivating, or deleting an authentication rule

To activate, inactivate, or delete an authentication rule:

  1. In the sidebar area, click Authentication Rules and then Authentication Rules.

    The Authentication Rules window appears in the content area.

  2. Click the menu icon ([Figure]) of your target authentication rule, and then select the menu item.

    Table 3‒32: Activating, inactivating, or deleting an authentication rule

    Item

    Description

    Activate

    Activates an authentication rule.

    Inactivate

    Inactivates an authentication rule.

    The inactivated authentication rule becomes temporarily unavailable.

    To make the inactivated rule available, activate it again.

    Delete

    Deletes an authentication rule. The deleted authentication rule cannot be restored.

  3. A confirmation dialog box appears depending on your choice. Click the OK button to perform the action.

(4) Creating an authentication policy

To create an authentication policy:

  1. In the sidebar area, click Authentication Rules and then Authentication Policy Definitions.

    The Authentication Policies window appears in the content area.

  2. Click the New Policy button.

    The New Authentication policy window appears.

    [Figure]

  3. Create an authentication policy.

    [Figure]

    The following table describes the items you specify.

    Table 3‒33: Settings for the authentication policy

    Item

    Description

    Policy Name (Japanese/Chinese) text box#1

    Enter the name of the policy.

    The value you enter here is displayed in windows that use Japanese and Chinese.

    Policy Name (English) text box#1

    Enter the name of the policy.

    The value you enter here is displayed in windows that use English. You can enter alphanumeric characters and symbols.

    Authentication Systems

    Select an authentication system that this authentication policy uses by using the >> button. You cannot select more than one authentication system.

    If one authentication system is selected, clicking the >> button does not add a new system to the list. To cancel the selected authentication system, click the [Figure] icon.

    Auth Methods

    Select an authentication method. You can select all authentication methods.

    These check boxes cannot be selected if an LDAP authentication system is selected for the authentication system.

    • Standard Password Authentication check box: Select to use the password authentication.

    • Certificate Authentication check box: Select to use electronic certificates to authenticate users.

    • SSO Authentication check box: Select to use the SSO Authentication.

    Password Setting Policy

    Specify the rules of available characters for passwords.

    This section cannot be specified if an LDAP authentication system is selected for the authentication system.

    • Need two or more types of characters.: A password must contain two or more of the following four types: digit, lowercase alphabetic character, uppercase alphabetic character, and symbol

    • Do not need two or more types of characters.

    Specify whether a password can include a user ID.

    • Accept passwords with a user ID.

    • Reject passwords with a user ID.

    Expire date#2

    The Indefinite check box is selected by default. If you want to set an expiration date, clear the Indefinite check box and enter the number of days in the range from 1 to 365. The value is set to 90 by default.

    #1

    - Some symbols (/\?*:|"<>@^) are not available in the text box.

    - A name consisting of only spaces or periods (.) is not available.

    - You can enter no more than 100 (for Windows) or 256 (for Linux) characters.

    #2

    If you clear the Indefinite check box and enter the number of days, users who use this authentication policy must change their password the next time they log in.

  4. Click the Create button.

    The authentication policy is created, and a dialog box appears indicating the policy is registered.

  5. Click the OK button.

    The Authentication Policies window appears.

(5) Editing an authentication policy

To edit an authentication policy:

  1. In the sidebar area, click Authentication Rules and then Authentication Policy Definitions.

    The Authentication Policies window appears in the content area.

  2. Click the menu icon ([Figure]) of the authentication policy you want to edit, and then select Edit.

    The Edit Authentication policy window appears.

  3. Change the settings. For details about each item, see 3.5.5(4) Creating an authentication policy.

    [Figure]

  4. Click the Update button.

    The authentication policy settings are updated, and a dialog box appears indicating the information is updated.

  5. Click the OK button.

    The Authentication Policies window appears.

    Important

    The edited authentication policy might not take effect unless the user logs out of JP1/DH - Server.

(6) Deleting an authentication policy

To delete an authentication policy:

  1. In the sidebar area, click Authentication Rules and then Authentication Policy Definitions.

    The Authentication Policies window appears in the content area.

  2. Click the menu icon ([Figure]) of the authentication policy you want to delete, and then select Delete.

    A dialog box appears asking you to confirm that you want to delete the policy.

  3. Click the OK button.

    The authentication policy is deleted, and the Authentication Policies window appears.

    Important

    Deleting an authentication policy also removes authentication rules that have the authentication policy you are trying to delete.