Administering CA Output Management Web Viewer › User Authentication › LDAP Authentication › Security System Checking Order

Security System Checking Order

Depending on your installation settings, your LDAP or security credentials are checked first.

This setting is normally set during installation on the LDAP Host Information panel.

Note: For more information, see the CA Output Management Web Viewer Installation Guide, the Indicate LDAP User Authentication section.

Regardless of the order of the security checks, if the user fails the first type of security check, the second type of security check will be called.

For example, if the LDAP security is checked first and the user failed all of the LDAP Directory checks, CA Output Management Web Viewer next attempts to check the user’s credentials against mainframe security.

Be aware that this setting might also affect your auto enrollment options.

• With mainframe security checked first, if your user passes the mainframe security check, that user will be logged into CA Output Management Web Viewer, and never checked against the LDAP system, and therefore never enrolled into the Role using LDAP authentication.
• With LDAP security checked first, the user might be logged into CA Output Management Web Viewer before they are given a chance to be automatically enrolled in the Default Role by mainframe security.

If your user has separate credentials for LDAP and mainframe security this will not be an issue. It is only an issue when the user name and password are the same for both types of security.