Logon Required

In the context of:

ESCWA

If ESCWA has no Security Managers defined in its Security Manager list, then it will not require a verification process (login) for users to interact with the process. Access to ESCWA will not be restricted. This leaves ESCWA open to use from any actors with network access.

The full-page login page for ESCWA will appear if a user has never logged into ESCWA before, or a user's session has timed out.

Directory Server

If a Directory Server has not got Restrict Directory Server Access checked, then it will not require a verification process (login) for users to interact with the process. Access to the Directory Server will not be restricted. This leaves the Directory Server open to use from any actors with network access. Therefore, it is critical that this endpoint has a verification requirement in place for preventing access from bad actors.

The login screen for a Directory Server in the ESCWA UI is a logon dialog that is displayed when Directory Server functions require verification. The Directory Server requiring verification will be indicated in the title, and there is the option to attempt to login with the current user credentials from the ESCWA UI session.

Configuration options

ESCWA
To ensure that ESCWA has a verification process required, using the ESCWA UI, perform the following steps:
  1. In the top menu bar, click Security.
  2. In the Security Navigation pane, click ESCWA Configuration
  3. On this ESCWA Security Facility Configuration page, specify a Security Manager in the Security Managers list.

You can specify Security Managers from the Security Managers list in the Security Navigation pane. See Securing an Enterprise Server Installation for more information.

Directory Server

To ensure a Directory Server has a verification process required, using the ESCWA UI, perform the following steps:

  1. In the top menu bar, click Native.
  2. In the Native Navigation pane, expand Directory Server.
  3. Click the directory server you require, then click Security > Directory Server Configuration.

    This takes you to the Directory Server Security Facility Configuration page.

  4. Check Restrict Directory Server Access.
  5. Click Apply.

Micro Focus strongly recommends that you implement External Security for Directory Servers. See External Security for more information.

Parent topic: Configuration Report