AuthAndAuth

= Authentication and Authorization =

CSS provides a pluggable API for Authentication and Authorization.

== Authentication == Authentication allows your users to "log in", usually with a name and password.

The CSS offers an implementation based on JAAS, which itself is pluggable and supports connections to your existing site-wide authentication mechanisms based on Kerberos or LDAP for checking if the user entered a valid password.

== Authorization == Once a user is authenticated, i.e. CSS knows for sure who's sitting in front of the terminal, authorization determines what this user is allowed to do: Acknowledge alarms? Change the alarm system configuration?

CSS offers implementations based on various LDAP schemas.

== How to configure Auth & Auth ==

See ''Authentication and Authorization'' on https://ics-web.sns.ornl.gov/css/devel.html