Using Role Based Access Control › User Authentication

User Authentication

Local and global users can log in to the CA 3Tera AppLogic GUI. Local users log in using the user name and password and are authenticated using the local directory service. Global users log in using the user name prepended with the slash character "/" and the password required by the global directory service. The initial slash character instructs CA 3Tera AppLogic to perform user authentication using the global directory service. In addition, both local and global users can SSH to the grid controller. Local users authenticate using the private key corresponding to the public key set in the user's profile properties. Global users also use this key-based form of authentication with the following caveats:

• When a global user opens an interactive 3tshell session, that user is required at once to authenticate with the global directory service using the user name and the password required by the global directory service.
• Non-interactive SSH access is disabled for global users.

When a global user logs into CA 3Tera AppLogic, that user's global group membership is read from the global directory service. This information is cached in the local directory service. When an authorization request is made, this cached global group membership information can be used in determining whether the request is granted.