Security Features

NAS Administrator and Netscape Directory Server provide facilities to enable user authentication to ensure that only authorized users can access applications, databases, and directories.

LDAP

Server administrators can use the Netscape Console to create LDAP users and groups to manage access to specified resources.

User Authentication

Enables user ID/password authentication to verify identity

Access Controls to Data Sources

Provides ACL facilities to help prevent unauthorized access

Netscape Application Server works within the framework of existing access controls for relational database management systems. A user or application must log in to the database before gaining access to the data.

Developers can write applications so that users enter login information only once and the application saves the information in a session object. Thereafter, the application uses the initial login information to log in to different databases, as needed, in the background without requiring additional user input.

Netscape Application Server shields backend data by acting as a secure gatekeeper between the Web server and the relational database system.

Data Security

Netscape Directory Server provides NAS applications with data security by using access control lists, Secure Sockets Layer (SSL), and password policies, following an industry standard specified by the RSA Corporation.

In addition, NAS provides secure Web server communication and supports SSL, HTTPS, and HTTP challenge-response authentication. To bridge the security gap between browsers and data sources, NAS supports user authentication, cookies, and database access controls for the secure handling of transactional operations. Event logging and tracking enables detection of, and protection against, unauthorized access.