ACCESSING A JUNCTION SERVER
(262GR 02-May-1997)

To successfully access a junction server through the WebCrusader Security Authority, you must grant "impersonate" ( i ) or "impersonate any" ( I ) permission to the intervening proxy server's Management ACL on behalf of the Security Authority principal (usually sdg-<hostname>) that is forwarding the request.

To successfully access a WebCrusader junction server through the WebCrusader Security Authority, you must:

• Grant impersonate ( i ) or impersonate any ( I ) permission to the intervening proxy server's Management ACL on behalf of the Security Authority principal (usually sdg-<hostname>) that is forwarding the request.
• Grant list junctions ( l ) permission to the the junction server's Management ACL on behalf of the Security Authority principal (usually sdg-<hostname>) and on behalf of the principal associated with the browser user who originated the request.

See chapter 4 in the WebCrusader Commander User's Guide for more information on setting up junction server security.