Managing remote users
When remote authentication is enabled, user accounts are created and managed on a remote authentication server (LDAP or Kerberos) and then mapped to a predefined library role that determines the user's access level. Authentication requests are passed to the remote authentication server.
When remote authentication is enabled, the page displays users who are defined on the remote authentication server and currently
connected to the library. From this page you can:
- View remote users and their properties, including their state (only users with a Connected state are displayed), their role, their email address, and the date and time of their last login. You cannot view local users.
- Disconnect a user.
- View a user's IP address ().
You can use CLI commands to perform functions that cannot be performed from
the GUI when remote authentication is enabled:
- Create a local user (createUser command).
- Delete a local user (deleteUser command).
- View all users who are currently connected to the library, either remote or local depending on command options (viewUsers command).