Authentication Methods

The parameter user_auth in tibemsd.conf determines the authentication methods the EMS server can use to authenticate incoming connection requests - either from EMS clients or other EMS servers. This parameter can have one or more of the following values (separated by comma characters):

  • local—authenticate incoming connection requests by validating the presented user credentials against locally defined user information (users.conf and groups.conf).

  • jaas—authenticate incoming connection requests by validating the presented user credentials using a custom or provided JAAS authentication module, including LDAP support (see Extensible Authentication).

  • oauth2—authenticate incoming connection requests by validating the presented OAuth 2.0 access token (see Authentication Using OAuth 2.0).

Each time the server receives a connection request, it attempts to authenticate it via each of the specified authentication methods in the order that this parameter specifies. The EMS server accepts successful authentication using any of the specified methods.