
Chapter 334
• The <User> tag inside the <UserList> tag specifies the user name of a server administrator in
its
name parameter and is a container for the <Password>, <Allow>, <Deny>, and <Order>
tags.
To connect with the Administration Console that is installed with the server, a user must be
defined in a
<User> tag group. For more information about using the Administration Console
(admin.swf), see Using the Administration Console.
You define the first administrator when you run the server installer. There must be at least one
administrator defined for the server. Otherwise no users can connect with the Administration
Console. You can define additional administrators by including additional
<User> sections in
the Server.xml file. Each <User> section must contain a <Password> tag. Normally, you edit
administrator user names and passwords using the Administration Console. You may use any
characters in user names entered with the Administration Console. However, if you edit this
information directly in the Server.xml file, remember to use only valid XML.
By default, only the Administration Console requires a valid administrator user name and
password when a connection is being made to the server. Other client applications do not
require any user name or password unless they are explicitly programmed to do so by the
author.
• <Password> specifies the password for the <User> tag that contains it. The encrypt attribute
indicates whether to encrypt the contents of the password. If the
encrypt attribute is set to
true, the password you see in the file is the encrypted password. If you edit the contents of this
tag directly in the Server.xml file rather than with the Administration Console, you must set
the
encrypt attribute to false and use only valid XML in the password. Passwords cannot be
empty ("").
• <Allow> contains a list of hosts from which the administrator user should be allowed to
connect. You can include whole host names (also called domain names) or IP addresses in the
list. Separate each host name or address with a comma. The keyword
all can be specified to
allow connections from all hosts.
For example, an
<Allow> tag might look like this:
<Allow>www.macromedia.com, 12.34.56.78</Allow>
Whenever possible, use IP addresses in the <Allow> tag. This increases the server’s
performance when processing connection requests.
• <Deny> contains a list of hosts from which the administrator user should not be allowed to
connect. You can include whole or partial host names (also called domain names) or IP
addresses in the list. By including partial host names, such as myCompany.com, you can deny
connections to users connecting from any computer within the myCompany.com domain.
Separate host names or addresses with a comma. The keyword
all can be specified to deny
connections from all hosts.
For example, a
<Deny> tag might look like this:
<Deny>hackerSite.com, 87.65.43.21</Deny>
As with the <Allow> tag, use IP addresses in the <Deny> tag whenever possible for increased
server performance.
Commenti su questo manuale