Download SnapGear 1.9.1 User Manual

User settings
A user with this access control can edit users' login information, create new users and
modify access controls for other users. Without this access control, users can only
change their own passwords. Because this access control allows a user to edit their own
permissions, it is best left such that only the root user has it.
The root user is special. This user alone has one access control which cannot be
removed. The root user is always able to edit user settings and thus they can grant
themselves any access control if need be. The root user also has the capability to set
User ID and Group ID when editing or creating users. It is best to leave these fields
blank when creating a new user as this lets the SnapGear appliance automatically
allocate and manage them.
If somebody with the user settings access control attempts to edit the root user (apart
from root themselves), they must enter the administrative password (i.e. the password for
the root account).
Internet access (via access controls)
A user with this access control is permitted controlled access to the web through the
SnapGear appliance’s web proxy. See the Access control and content filtering section in
the chapter entitled Firewall for details on controlling LAN users’ web access.
Password
The SnapGear appliance’s administrative (root) password is used to restrict access to the
SnapGear Management Console web administration pages (Web Admin) and the
SnapGear appliance itself. The SnapGear appliance administrative password is the ‘key’
to the security of your network and must be kept secret. SnapGear recommends
choosing a password that is easy for you to remember but hard for unauthorized people
to guess.
A potential security issue may be introduced by having a network-connected SnapGear
appliance accessible, using the factory default password. To prevent this, the password
for the SnapGear appliance should be changed when Setup Wizard is run or the
SnapGear Management Console web administration pages are accessed for the first
time.
The SnapGear appliance administrative password can be changed at any time using the
SnapGear Management Console web administration pages by clicking Password in the System
menu.
160
System