Administration Guide › Tools to Manage CA Directory › DSA Console › How the DSA Console Works › How the DSA Console Can Authenticate Using Directory Entries

How the DSA Console Can Authenticate Using Directory Entries

You can set up the DSA to let users with an entry in the directory connect to the DSA console.

If you set this up, the following steps describe what happens when a user connects to the directory:

1. The user tries to connect to the directory, using the correct console port.
2. The user is prompted for the following information:
   • The user's DN in LDAP format (for example, cn=Craig LINK,ou=Administration,ou=Corporate,o=democorp,c=AU)
   • The user's password
3. The DSA checks that the DN and password match an entry.
4. The DSA checks whether the user or their role is listed in the set dxconsole-users command.

   If the user is listed, the user is now connected to the DSA console.

Note: We recommend using this feature through TLSClient to protect clear-text passwords.

More information:

Specify Which Users Can Connect to a DSA Console

Secure the DSA Console with TLSclient