mirror of https://github.com/opnsense/docs
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
63 lines
1.8 KiB
ReStructuredText
63 lines
1.8 KiB
ReStructuredText
7 years ago
|
=================
|
||
|
User Management
|
||
|
=================
|
||
|
|
||
|
.. image:: images/user_manager.png
|
||
|
:scale: 100%
|
||
|
|
||
|
The user manager of OPNsense allows for controlling access to the different
|
||
|
part (pages) of the configurator as well as controlling access to particular
|
||
|
services on a per user bases.
|
||
|
|
||
|
Authentication
|
||
|
--------------
|
||
|
OPNsense offers integration with external servers for services that require user
|
||
|
authentication. These services include:
|
||
|
|
||
|
* IPsec
|
||
|
* OpenVPN
|
||
|
* Captive Portal
|
||
|
* Proxy
|
||
|
|
||
|
Integrated into OPNsense are the **Local User Database** and **Voucher Server**.
|
||
|
The Voucher Server is intended to be used with the Captive portal.
|
||
|
|
||
|
External service currently supported are:
|
||
|
|
||
|
* LDAP (OpenLDAP, MS Active Directory, Novell eDirectory)
|
||
|
* Radius
|
||
|
|
||
|
Authorization
|
||
|
-------------
|
||
|
Besides authenticating, user authorization to access parts of the configuration
|
||
|
can also be setup with an external server, but in order to grant the appropriate
|
||
|
privileges to the users they need to be imported in OPNsense's local user manager.
|
||
|
This way one can validate a user against its externally stored password and have
|
||
|
a fine grained control over the configuration pages that user may access.
|
||
|
|
||
|
* Graphical User Interface (Web Configurator)
|
||
|
|
||
|
Users, Groups & Privileges
|
||
|
--------------------------
|
||
|
When using the local user manager, either stand alone or on combination with an
|
||
|
external authentication server one can define groups to combine a set of privileges
|
||
|
for a specific user group. A user should be an individual, a group needs to be
|
||
|
specific in such a way that anyone of that group can be granted the same access
|
||
|
rights, called privileges.
|
||
|
|
||
|
|
||
|
Configuration
|
||
|
-------------
|
||
|
|
||
|
Local User Manager
|
||
|
------------------
|
||
|
:doc:`how-tos/user-local`
|
||
|
|
||
|
LDAP
|
||
|
----
|
||
|
:doc:`how-tos/user-ldap`
|
||
|
|
||
|
Radius
|
||
|
------
|
||
|
:doc:`how-tos/user-radius`
|