5.

Managing Users, Groups, and

Authentication

5

This chapter describes how to manage users, groups, and authentication on the STM. This chapter contains the following sections:

• About Users, Groups, and Domains on this page

• Configuring Groups on page 148

• Configuring User Accounts on page 152

• Configuring Authentication on page 154

• Global User Settings on page 170

• Viewing and Logging Out Active Users on page 172

About Users, Groups, and Domains

Users can be individual users or can be part of a group, and a group is generally part of a domain. Normally, you first create a domain, then you create a group that you assign to a domain, and then you create users that you assign to a group. The STM does not let you create domains; the local groups that you define are automatically assigned to the STM’s prosecuredomain default domain. However, you can use existing LDAP and RADIUS domains on the STM.

The main purpose for using groups and domains is to apply exceptions (that is, adding or removing restrictions) for Web browsing, URL access, and application access (see

Setting

Access Exception Rules for Web Access

on page 132).

Note:

For information about a different type of users—those with administrative and guest privileges—see

About Users with

Administrative and Guest Privileges

on page 61.

Chapter 5. Managing Users, Groups, and Authentication | 147