Dell PowerConnect W-Clearpass 100 Software Guía de usuario descargar pdf (Pagina 491)

100

101

ClearPass Guest 3.9 | Deployment Guide Reference | 491

Authentication Module Configuration

thread.max_requests_per_server = 0 Set the maximum number of requests a server should handle before

exiting. Zero is a special value meaning “infinity”, or “the servers never

exit”.

thread.max_queue_size = 65536 Set the maximum number of incoming requests which may be queued for

processing. After the queue reaches this size, new requests are dropped.

The default value is recommended for most deployments. Do not change

the default value unless you have a specific requirement.

Table 60 Authentication Module Configuration Settings

Value Description

module.pap = yes PAP module to authenticate users based on their stored password.

pap.encryption_scheme = crypt The PAP module supports multiple encryption schemes:

 clear: Clear text

 crypt: Unix crypt

 md5: MD5 encryption

 sha1: SHA1 encryption

module.chap = yes Authenticates requests containing a CHAP-Password attribute.

module.pam = yes Pluggable Authentication Modules for Linux.

module.unix = yes Unix /etc/passwd style authentication.

unix.cache = no Cache /etc/passwd, /etc/shadow, and /etc/group for authentication. The

default is to not cache them. Allowed values: no, yes

unix.cache_reload = 600 If the cache is enabled, reloads its contents every ‘cache_reload’ seconds.

Use 0 to disable.

module.mschap = yes Microsoft CHAP authentication.

This module supports MS-CHAP and MS-CHAPv2 authentication. It also

enforces the SMB-Account-Ctrl attribute.

mschap.use_mppe = no If ‘use_mppe’ is set to ‘yes’, the mschap module will add MS-CHAP-MPPE-

Keys for MS-CHAPv1 and MS-MPPE-Recv-Key/MS-MPPE-Send-Key for

MS-CHAPv2.

mschap.require_encryption = yes If ‘use_mppe’ is enabled, ‘require_encryption’ makes encryption moderate.

mschap.require_strong = yes ‘require_strong’ always requires 128 bit encryption.

mschap.with_ntdomain_hack = no Windows sends us a username in the form of DOMAIN\user, but sends the

challenge response based on only the user portion. This workaround

corrects for that incorrect behavior.

Table 59 Thread Pool Settings (Continued)

Value Description

1 2 ... 486 487 488 489 490 491 492 493 494 495 496 ... 517 518

Comentarios a estos manuales

Sin comentarios

Dell PowerConnect W-Clearpass 100 Software Guía de usuario Pagina 491

Comentarios a estos manuales

Relacionado con productos y manuales para Software Dell PowerConnect W-Clearpass 100 Software