Authentication and Authorization

CSS provides a pluggable API for Authentication and Authorization.

Authentication

Authentication allows your users to "log in", usually with a name and password.

The CSS offers an implementation based on JAAS, which itself is pluggable and supports connections to your existing site-wide authentication mechanisms based on Kerberos or LDAP for checking if the user entered a valid password.

Authorization

Once a user is authenticated, i.e. CSS knows for sure who's sitting in front of the terminal, authorization determines what this user is allowed to do: Acknowledge alarms? Change the alarm system configuration?

CSS offers implementations based on various LDAP schemas.

How to configure Auth & Auth

See Authentication and Authorization chapter in http://cs-studio.sourceforge.net/docbook/