Controlling Radius authentication

Question

Hi All,
We are using RSA as authentication server for Networking Devices Authentication(Cisco ASA, Cisco 6506, Cisco 35xx). Now If We authorized an user in RSA to login to ASA then he simply "log in" to Firewall. So this way it allowes al the RSA users(what if RSA users are 100+) to login to ASA and then can play with it(Sounds really scary).
Being a Network Admin I also need to depend on RSA for authentication. Now here are my Questions:
1.> Is there any way to give locally authentication to Network Admins.
2.> All RSA users can login to ASA. I understand as we have configured RSA as authentication server so It will happen. But can't we control there privilage level and access limitations to ASA and other Networking Devices ?

Answer 1

Yup, that's the unfortunate truth about browsers. There's nothing
programmatically from the server side (JSP/servlet) you can do to know when
the user CTRL-F4s their browser (short of the JS on the client page, but
even then, you aren't guaranteed it's execution). :< That's part of the joy
of using a browser for your client. I've seen this with JSPs and with ASPs
(so MS has this problem as well).
But as the other posting mentioned, the way most sites handle it is with the
javascript or with a submit button or something on the server that
explicitly logs the user out and releases all memory/objects used by that
session. Try your online bank, or TicketMaster, I think they all have a
logout button on their page. We're turfing our older J2EE engine for
WebLogic cause of the session logout functionality wasn't working dependably
(among other reasons :>).
Good luck! :>
"Cameron Purdy" <[email protected]> wrote in message
news:3c470fdd$[email protected]..
You can't. That's the answer.
You can get close if you want to use JavaScript on the client (on close
event to trigger an "invalidate session" Servlet).
On the server, you can use HttpSessionListener to see when a session dies.
Peace,
Cameron Purdy
Tangosol, Inc.
Clustering Weblogic? You're either using Coherence, or you should be!
Download a Tangosol Coherence eval today at http://www.tangosol.com/
"Juan Espino" <[email protected]> wrote in message
news:3c46c648$[email protected]..
Hi everybody!
I've got a problem. My aplication was developed to allow some
connections
at the
same time with the same user and password and without session timeinvalidation.
But now, it's necessary to avoid all of this. So i've thought to controlthe different
logins with a hashtable in the app context, but my problem is that i
don't
know
when an user session ends or when the nvigator is closed.
plz, can anybody tell me a way to resolve this?
thx