# Configuring NetWare user authentication

NetWare user authentication may be configured in one of two ways: out-of-box authentication and NDS authentication. The two methods are mutually exclusive.

## Out-of-box authentication

Out-of-box authentication works as follows:

- Administrative access is exclusively granted to the 'Admin' user account, which must be defined within the NetWare Bindery context of the server running the ServeRAID Manager agent.
- User access is granted to all Bindery and NetWare Directory Services (NDS) user accounts. For NDS users, the user account must reside within the same tree as the server running the ServeRAID Manager agent.

When logging into the ServeRAID Manager, NDS users must provide the fully distinguished account name.

## NDS authentication

NDS authentication is based on NDS group membership. To set up NDS group membership, create and populate a NDS group for storage administration. After you install the ServeRAID Manager, edit the ServeRAID Manager agent properties file to restrict authentication to the new group.

For example:

1. Choose the group name ".CN=StorageAdmins.O=Acme".

   Note: The group must reside within the same NDS tree as the server running the ServeRAID Manager agent.

2. Using the Novell Administration utility, add the appropriate users to the new group.
3. Add the following entry to the SYS:\RAIDMAN\RaidAgent.pps file:

   `agent.group.NetWareStorageAdmin=<fully distinguished group name>`

   The new entry should look like this :

   `agent.group.NetWareStorageAdmin=.CN=StorageAdmins.O=Acme`

4. Restart the server.

Limited user access is granted to all NDS user accounts.

## More information

- Logging in to the ServeRAID Manager
- Adding a remote system
- Configuring the ServeRAID Manager agent

Glossary | Contents

x-1114-SRM-00-14-EN