H3C Technologies H3C MSR 50 - Manual (Page 454)

69
Item Description
Password
Set a password for the administrator account, and enter the password again to confirm
the password.
Confirm Password
Username Format
Set the username format used to log in to the AD server. Options include Without the
AD domain name, With the AD domain name, and Login name.
Configuring combined authentication
A combination authentication method can combine any two of the four authentication methods (local
authentication, RADIUS authentication, LDAP authentication, and AD authentication) in any order. With
combined authentication configured, the system authenticates a user twice by using the two specified
authentication methods. You can specify which method is used first, and specify whether to ask for a
password during the second authentication.
Which resources are available for a user who has passed a combined authentication and the online
username used are both determined by the first authentication. When the user accesses single login
resources, the system takes the password used in the first authentication as the login password.
1. Select VPN > SSL VPN > Domain Management > Authentication Policy from the navigation tree.
2. Click the Combined Authentication tab. The combined authentication configuration page appears.
Figure 443 Combined authentication
3. Configure the combined authentication settings as described in Table 187 .
4. Click Apply.
Table 187 Configuration items
Item Description
Enable combined
authentication
Select this item to enable combined authentication.
First-Time Authentication
Method
Select an authentication method as the first-time authentication method.
Second-Time Authentication
Method
Select an authentication method as the second-time authentication method.
Ask password again on the
second authentication
With this item selected, the system provides the login page and asks a user
for a password again after the user passes the first authentication. If you do
not select this item, the system automatically uses the password for the first
authentication for the second authentication.
IMPORTANT:
This function takes effect only when you enable full customization of the user
interface and the customized user interface can provide a login page twice.