Configuration
3.5
Configure Authentication Server
3.5.1
Component Record
A Client Component record must be configured in the Authentication Server for the IIS 6 Module. The wizard can create the required record if:
The Authentication Server is using an ODBC database (including the embedded PostgreSQL database) as its data store, or
The Authentication Server is using Active Directory and the wizard can successfully connect to Active Directory from the web server.
To create the Client Component record manually:
1.
Create a Client Component record for the IIS 6 Module.
a.
The Component Type should be set to Citrix Web Interface .
b.
The Location should be set to the same IP address as in the Connect from IP Address setting in IIS 6
Module Configuration.
c.
Select a Policy for the Authentication Server to use when processing authentication requests from the
IIS 6 Module. See
3.5.3
Policy
for more information.
2.
A valid license key must be obtained for the IIS 6 Module and loaded in to the Component record.
3.5.2
Configure for Windows User Accounts
3.5.2.1
Windows User Name Resolution
If the Authentication Server is installed on a Windows platform and is using an ODBC database (including the embedded database) as its data store, it is recommended that you enable Windows User Name Resolution. This allows the Authentication Server to use Windows functionality to resolve a User ID – as entered during a login – into a User ID and Domain. It is highly recommended if Dynamic User Registration will be enabled.
This setting is not required where the Authentication Server is using Active Directory as its data store - name resolution will occur automatically.
This setting is not available on Identikey Server on Linux, or aXs GUARD Identifier.
If the Use Windows User Name Resolution feature is disabled or unavailable, it is essential that users always use the same login name. If they try to log in using a different form of their Windows account name, their login will be
Digipass Authentication for Citrix Web Interface Guide 50
