mirror of
https://github.com/opnsense/docs
synced 2024-11-09 01:10:33 +00:00
63 lines
1.8 KiB
ReStructuredText
63 lines
1.8 KiB
ReStructuredText
|
=================
|
||
|
|
User Management
|
||
|
|
=================
|
||
|
|
|
||
|
|
.. image:: images/user_manager.png
|
||
|
|
:scale: 100%
|
||
|
|
|
||
|
|
The user manager of OPNsense allows for controlling access to the different
|
||
|
|
part (pages) of the configurator as well as controlling access to particular
|
||
|
|
services on a per user bases.
|
||
|
|
|
||
|
|
Authentication
|
||
|
|
--------------
|
||
|
|
OPNsense offers integration with external servers for services that require user
|
||
|
|
authentication. These services include:
|
||
|
|
|
||
|
|
* IPsec
|
||
|
|
* OpenVPN
|
||
|
|
* Captive Portal
|
||
|
|
* Proxy
|
||
|
|
|
||
|
|
Integrated into OPNsense are the **Local User Database** and **Voucher Server**.
|
||
|
|
The Voucher Server is intended to be used with the Captive portal.
|
||
|
|
|
||
|
|
External service currently supported are:
|
||
|
|
|
||
|
|
* LDAP (OpenLDAP, MS Active Directory, Novell eDirectory)
|
||
|
|
* Radius
|
||
|
|
|
||
|
|
Authorization
|
||
|
|
-------------
|
||
|
|
Besides authenticating, user authorization to access parts of the configuration
|
||
|
|
can also be setup with an external server, but in order to grant the appropriate
|
||
|
|
privileges to the users they need to be imported in OPNsense's local user manager.
|
||
|
|
This way one can validate a user against its externally stored password and have
|
||
|
|
a fine grained control over the configuration pages that user may access.
|
||
|
|
|
||
|
|
* Graphical User Interface (Web Configurator)
|
||
|
|
|
||
|
|
Users, Groups & Privileges
|
||
|
|
--------------------------
|
||
|
|
When using the local user manager, either stand alone or on combination with an
|
||
|
|
external authentication server one can define groups to combine a set of privileges
|
||
|
|
for a specific user group. A user should be an individual, a group needs to be
|
||
|
|
specific in such a way that anyone of that group can be granted the same access
|
||
|
|
rights, called privileges.
|
||
|
|
|
||
|
|
|
||
|
|
Configuration
|
||
|
|
-------------
|
||
|
|
|
||
|
|
Local User Manager
|
||
|
|
------------------
|
||
|
|
:doc:`how-tos/user-local`
|
||
|
|
|
||
|
|
LDAP
|
||
|
|
----
|
||
|
|
:doc:`how-tos/user-ldap`
|
||
|
|
|
||
|
|
Radius
|
||
|
|
------
|
||
|
|
:doc:`how-tos/user-radius`
|