VBrick Systems Server ETV v3.1 Manual Do Utilizador
Access Control
ETV Portal Server Administrator Guide
49
– If security is a concern, SSL should be turned on between clients and the ETV Portal
Server server. This allows User Names and Passwords to be encrypted between the client
and the server. See the section Configuring for SSL on page 61 for instructions on how
to configure this.
Server server. This allows User Names and Passwords to be encrypted between the client
and the server. See the section Configuring for SSL on page 61 for instructions on how
to configure this.
2. VBrick – If there are VBricks in the network, they are auto-discovered but still need to
be added to the Portal Server database.
3. VoD Server – If there are VoD servers in the network, again they need to have
connectivity to the Portal Server and the folder structure needs to be configured.
4. Set-Top Boxes – If there are STBs to be deployed in the system, they should be
configured with a Host Name, and should be configured to point to the ETV Portal
Server.
Server.
Additionally, if an LDAP server is going to be used to authenticate users, then the
administrator should know the address of the server, the group structures on the LDAP
server, and the Context (if the server is not Microsoft's Active Directory).
administrator should know the address of the server, the group structures on the LDAP
server, and the Context (if the server is not Microsoft's Active Directory).
2. Choose an Authentication Method
Select one of the following methods:
Both methods can be used simultaneously. If LDAP authentication is enabled, the ETV
Portal Server will attempt to authenticate against the LDAP server first, and if this is
unsuccessful, will attempt to authenticate against the local ETV Portal Server User Database.
Portal Server will attempt to authenticate against the LDAP server first, and if this is
unsuccessful, will attempt to authenticate against the local ETV Portal Server User Database.
VBrick Database
If authentication is enabled, you must select a database (either VBrick or LDAP). The VBrick
(ETV Portal Server) user database contains user, group, and resource information that
provides the Portal Server with information to allow it to provide the appropriate privileges
to users and Set-Top Boxes that are accessing the system. Administrators should authenticate
users with the native Portal Server user database if:
(ETV Portal Server) user database contains user, group, and resource information that
provides the Portal Server with information to allow it to provide the appropriate privileges
to users and Set-Top Boxes that are accessing the system. Administrators should authenticate
users with the native Portal Server user database if:
•
User authentication is required, but the organization does not have an LDAP server.
•
For STBs, the organization wishes to use User PINs. Since User PINs are not available in
the LDAP directory, the users need to be created in the ETV Portal Server database
(Note: only those users that need PINs to access STBs need to be created in the ETV
Portal Server database. PC or Mac users can still be authenticated against LDAP).
the LDAP directory, the users need to be created in the ETV Portal Server database
(Note: only those users that need PINs to access STBs need to be created in the ETV
Portal Server database. PC or Mac users can still be authenticated against LDAP).
Note
In order to scan the Groups available in Microsoft's Active Directory, in Windows
Explorer, go to
Explorer, go to
Tools > Folder Options
. On the
General
tab, make sure that the
Show common tasks in folders
is selected. Then go to
Start > My Network Places
and select
Network Tasks > Search Active Directory
.
ETV Portal Server
User Database
User Database
The native ETV Portal Server user database provides local
authentication for users and administrators.
authentication for users and administrators.
LDAP Directory
Server
Server
Enables the ETV Portal Server to authenticate against, and
retrieve user and group data from, an existing LDAP server.
retrieve user and group data from, an existing LDAP server.