8e6 Technologies R3000 Network Card User Manual


 
CHAPTER 1: INTRODUCTION AUTHENTICATION OPERATIONS
8E6 TECHNOLOGIES, R3000 ENTERPRISE FILTER AUTHENTICATION USER GUIDE 27
Authentication methods
Tier 1 supports two server authentication methods: Server
Message Block (SMB) and LDAP.
SMB protocol
SMB is a client/server protocol that requires the client to
send a request to the server and receive an authentication
response from the server, in order for the client to access
resources on the network.
As the default protocol for NT 4.0 and earlier operating
systems, SMB is supported by Windows 2000 and later OS
versions.
SMB Signing
SMB Signing is a Windows security feature that prevents an
active network session between a client and server from
being tapped. While Microsoft has made this feature avail-
able since Windows NT 4.0, it was not a default setting.
However, in Windows 2003, this feature is enabled by
default.
Since SMB Signing is not currently supported by the R3000,
8e6 recommends disabling the requirement for this feature.
This does not disable SMB Signing for machines that
support it, but allows devices that do not support SMB
Signing to connect. To disable the default setting that
requires SMB Signing for all connections, follow the instruc-
tions in Appendix D: Disable SMB Signing Requirements.
Alternately, if you have an available Windows 2000
Server—or an earlier Windows NT 4.0 Server—and are
willing to establish the necessary trust relationships with the
Windows 2003 Server, this earlier Windows server can be
used as the primary authentication server for the R3000
instead of the Windows 2003 Server.