There are three possible connection types:
Type | Description |
---|---|
Standard connection | Connections between the client device and Tarantella server are not encrypted. |
Secure (SSL) connection | Connections between the client device and Tarantella server are encrypted. This connection type is only available with the Tarantella Security Pack. |
Denied | The user is denied a connection. |
A user's connection type depends on these factors:
User Mulan Rouge logs in to Tarantella from her usual client device, fez.indigo-insurance.com. She logs in to a server on which the Tarantella Security Pack is installed. Processing of Connections settings is enabled.
Mulan types her usual username and password, which correspond to
the person object with TFN
name .../_ens/o=Indigo Insurance/ou=Finance/cn=Mulan Rouge
.
To determine her connection type, Tarantella checks the person object's Connections attribute. In this example, assume this has two values:
Client device | Tarantella server | Connection |
---|---|---|
*.indigo-insurance.com | * | Standard |
* | * | Secure |
The order of these values is significant: the first match found determines the connection type. In this case the first entry matches, so Mulan receives a standard connection.
If Mulan instead connects from a client device that's not part of indigo-insurance.com, the first entry doesn't match -- but the second one does. In this case Mulan would receive a secure connection.
If Mulan's Connections attribute had no values, the connection type would be determined by the Connections attribute of the parent in the organizational hierarchy: in this case, the organizational unit Finance.
If necessary, Tarantella continues to check parent OUs, and finally the top-level organization, until a match is found.
If there's no matching entry for the organization object, the user is given the best available connection.
Any connection may be denied if there is doubt over its validity, for example if a problem with a web browser means the incorrect TCP port is used for the connection.