Nam e resolution in DPP Funk SBR using an ODBC datastore. Creation date: 12/ 12/ 2005 Last Review: 18/ 01/ 2006 Revision num ber: 1

Transcription

1 Nam e resolution in DPP Funk SBR using an ODBC datastore Creation date: 12/ 12/ 2005 Last Review: 18/ 01/ 2006 Revision num ber: 1 Docum ent type: How To Security status: EXTERNAL Sum m ary The useri D entered by the digipass user can be translated differently, depending on configurat ionset t ing. This art icle provides an overview. Details With the Digipass Plugin (DPP) for Funk Steel Belted Radius (SBR) using an ODBC datastore, the useri D entered by the digipass user can be translated in 2 ways: 1. Using Windows User Nam e resolution 2. Not Using Windows User Nam e resolution 1. Using W indow s User Nam e resolution Windows User Nam e Resolution feature is typically used when you use Windows backend authentication and the sam e user logs in with different Windows User Nam e form ats: - UPN (@vasco.com ) - Windows NT form at (VASCO\ ) - Userid (). The table below shows what the resulting UserI D and dom ain are for the outlined logon form at and conditions..doc (1.0) 7/ 03/ : 15 Page 1 of 6

2 Logon form VASCO\ John Default dom ain is defined( e.g. as ) vasco.com vasco.com No default dom ain is defined Æ dom ain nam e is used vasco.com vasco.com The concept of the dom ain is explained in the Digipass Plug-I n for Funk Adm inistration Reference m anual 2. NOT using W indow s User Nam e resolution To identify the Dom ain and the UserI D of a user who is logging on, the following rules are applied if the form userid@dom ain is used I f the entered dom ain exists in the DPP datastore, that Dom ain will be used. I n that case, the UserI d will have ain part rem oved. I f the dom ain does not exist in the DPP datastore, the whole UserI d will rem ain as it is: userid@dom ain. that will be used is the default dom ain. I f no default dom ain is defined, the dom ain is used..doc (1.0) 7/ 03/ : 15 Page 2 of 6

3 The table below shows what the resulting UserI D and dom ain are for the outlined logon form at and conditions. Logon form at vasco.com exists in the DPP Default dom ain is defined( e.g. as ) vasco.com exists in the DPP No default dom ain is defined dom ain nam e is used vasco.com does NOT exists in the DPP Default dom ain is defined( e.g. as vasco.com does NOT exists in the DPP No default dom ain is defined dom ain nam e is vasco.com VASCO\ VASCO\ VASCO\ VASCO\ VASCO\ John 3. DPP for funk configuration Som e of the param eters referenced in the previous paragraphs are hidden in various m enus and screens. This paragraph shows how to configure these param eters 3.1. Enabeling or disabeling W indow s User Nam e resolution This is a setting on the Plug-I n level. Open the Funk SBR Plug-I n Configuration via the start m enu:.doc (1.0) 7/ 03/ : 15 Page 3 of 6

4 Select the ODBC tab and press the configure advanced settings button Check or uncheck the Use Windows Name Resolution checkbox.doc (1.0) 7/ 03/ : 15 Page 4 of 6

5 3.2. Definition of the dom ain This is also a definition on the Plug-I n level. This param eter is on the sam e page in the GUI as the Use Windows Nam e Resolution. See paragraph 3.1 to get to this window. Here you can define the nam e of the dom ain, the dom ain that will be used if no default dom ain has been defined Definition of the default dom ain The definition of the default dom ain is done in the Policy definition. Open the properties of the policy via the DPP Adm inistration m m c interface. Select the User Settings tab.doc (1.0) 7/ 03/ : 15 Page 5 of 6

6 Applies to: Digipass Plug-I n for Funk Steel-Belted Radius 2.1 References: Digipass Plug-I n for Funk Product Guide A4.pdf Digipass Plug-I n for Funk Adm inistration Reference A4.pdf.doc (1.0) 7/ 03/ : 15 Page 6 of 6