How to cascade external authentication servers 编辑
A Citrix Application Delivery Management (ADM) supports a unified system of authentication, authorization, and accounting (AAA) protocols, including RADIUS, LDAP, and TACACS, in addition to supporting local servers for authenticating local users and groups. The unified support provides a common interface to authenticate and authorize all of the local and external AAA clients who are accessing the system. Citrix ADM can authenticate users regardless of the actual protocols they to communicate with the system.
Cascading external authentication servers provides a continuous non-failing process for authenticating and authorizing external users. If authentication fails on the first authentication server, Citrix ADM attempts to authenticate the user by using the second external authentication server, and so on. To enable cascading authentication, you need to add the external authentication servers to Citrix ADM. You can add any type of the supported external authentication servers (RADIUS, LDAP, and TACACS). For example, if you want to add four external authentication servers for cascading authentication, you can add two RADIUS servers, one LDAP server, and one TACACS server, or all servers can be of RADIUS type. You can configure up to 32 external authentication servers in Citrix ADM.
Configuring cascading external authentication servers
In Citrix ADM, navigate to System > Authentication.
On the Authentication page, click Authentication Configuration.
On the Authentication Configuration page, select EXTERNAL from the Server Type drop-down list (only external servers can be cascaded).
Click Insert, and on the External Servers page, select one or multiple authentication servers that you would like to cascade.
Select Enable fallback local authentication if you want the local authentication to take over if the external authentication fails.
Click OK to close the page.
The selected servers are displayed under External Servers as shown in the figure below.
You can also specify the order of authentication by using the icon next to the server names to move servers up or down the list.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论