Last Updated: 12/28/2000	contents | prev | next

Web-based Administration

Using a forms-capable web browser you can administer your site's security configuration from almost anywhere. This chapter fully describes all the functionality offered using WebSentinel's web-based administration. Due to differences in how some browsers display HTML, the screen shots in this chapter may differ somewhat from what your browser produces but the functionality is the same.

You'll find that though these administration interfaces are all delivered through a web browser using standard HTML tables, much of the functionality is driven using windows, icons, and buttons much like the standard Mac OS interface. WebSentinel's web-based administration does not require Java or JavaScript support in order to work correctly - any web browser that supports forms is all that is needed.

Before you can use the web-based admin, you must grant yourself access to it as this is one of the areas of operation WebSentinel is pre-configured to protect. Using WebSentinel Admin, create a user and then grant that user access to the "Plug-in Admin" realm (which has a default match string of "admin") if you have not already done so. Note: you may want to change the match string for this realm as not to conflict with any other possible occurrences of the string "admin" in your URLs. To connect to the server, simply launch your favorite web browser and request the following URL:

Figure 5.1: Connecting to the web-based admin URL.

Enter the new user's username and password when prompted and you will be presented with WebSentinel's main menu. This is the starting point for all operations performed with the web-based admin, and gives a summary of the features offered.

Figure 5.2: The web-based admin main menu.

From this point you can create new, or modify existing, users, groups, and realms. The web-based admin also provides some insight into what is currently being held in WebSentinel's user cache.

The web-based admin will always display the menu of commands on the left side of your screen. Listings or details for each option will be shown on the right side, next to the menu (as shown in Figure 5.3 below).

We'll start by deleting the test user we added in the Introduction to WebSentinel chapter, Elvis. Then, we'll add a new user and give them access to the Log Files realm. To begin, click the "List Users" button on the main menu to see a listing of all users in the Built-in people target.

After locating and clicking on the listing for our example user, Elvis, we are given the user detail window. The user detail window is similar to using the WebSentinel Admin application. User name and password, realm access, group membership, notes and its label can be set using this form.

Figure 5.3: The user details for Elvis.

In the realms and groups fields of a user's detail in the web-based admin all defined realms and groups are listed. Only the selected items are those the user has access to. Most web browsers allow multiple selections in these field listings by command-clicking on items. After making any changes to a user, clicking on the "Modify User" button will save any changes. Additionally, you can permanently remove the user by clicking on the "Delete User" button.

Since we want to show off the user creation features of the web-based admin, we'll delete Elvis from our user listing and then recreate him afterwards.

Figure 5.4: User deleted.

After deleting the record we can create a new user by simply following the "New User" link which yields an empty user detail screen. After filling out the form with the new users info and setting their realm access privileges, simply click on the "Add User" button to save the new user.

The web-based admin allows you to lookup any user. Simply select the appropriate data target, enter the username and click "Lookup User". If there is a matching username, you will be shown the Modify User screen to edit or remove that user. The search is not case sensitive, but you must enter the complete username as the search will only return an exact match.

Figure 5.5: Lookup User.

Managing groups with the web-based admin is nearly identical to working with users. To modify or delete an existing group, click "List Groups" item in the main menu. To add a new group simply click "New Group" and continue as you would with WebSentinel Admin.

As with WebSentinel Admin, the web-based admin allows you to set up a New Admin Group. Any user who is a member of this group automatically gains access to all protected realms.

Figure 5.6: Add a New Admin Group.

Managing your realms with the web-based admin is very similar to the process in which you work with users and groups. To modify or delete an existing realm, first click on the "List Realms" item at the main menu.

Figure 5.7: Realms listing in web-based admin.

Clicking on any realm listing will allow you to modify the realm's configuration or delete it altogether. Note you are not able to set the Login form or No Access page paths from the web-based admin. All other settings match those offered in the WebSentinel Admin application. After making any changes, clicking on the "Set Realm" button will save the realm.

Figure 5.8: Realm detail for "Plug-in Admin".

The web-based admin also allows you to manage your Denied Workstations. As with other portions of the web-based admin, the options are straightforward. List Denied Workstations will show you a current list of all Denied Workstations. Clicking on a workstation in the list will allow you to modify or delete that workstation. New Denied Workstation will allow you to enter a new workstation.

Figure 5.9: Denied Workstations listing.

Figure 5.10: Modify Denied Workstation.

The remaining option available from the web-based admin main menu is "Show Cached Users". This option is offered for those who are interested in what is currently contained in WebSentinel's user cache and isn't necessarily needed in order to use the product.

The cached user listing can be helpful if you would like a quick glimpse into who is accessing your site and which realms they have accessed.

Figure 5.11: Cached Users.