|Skip Navigation Links|
|Exit Print View|
|Trusted Extensions User's Guide Oracle Solaris 11 Information Library|
The following tasks step you through logging in to Trusted Extensions. You review and specify security information before reaching the desktop.
Be sure to type your username exactly as your administrator assigned it to you. Pay attention to spelling and capitalization.
If you make an error, type a fake password. The Username field appears.
Press the Return key to confirm your username.
Caution - You should never see the trusted stripe when the login screen appears. If you see the trusted stripe while attempting to log in or unlock the screen, do not type your password. There is a possibility that you are being spoofed. A spoof is when an intruder's program is masquerading as a login program to capture passwords. Contact your security administrator immediately.
For security purposes, the characters do not display in the field. The system compares the login name and password against a list of authorized users.
Click OK to dismiss the error dialog box. Retype your user name, then the correct password.
If you do not restrict yourself to a single label, you can view data at different labels. The range in which you can operate is bounded at the upper end by the session clearance and at the lower end by the minimum label that your administrator assigned to you.
Always check that nothing is suspicious about the last login, such as an unusual time of day. If you have reason to believe that the time is not accurate, contact your security administrator.
The Message Of The Day field can contain warnings about scheduled maintenance or security problems. Always review the information in this field.
The MOTD dialog box indicates any roles that you can assume, your minimum label, and other security characteristics.
Click the Restrict Session to a Single Label button to log in to a single-level session.
You are presented with a label builder. If you are logging in at a single label, the label builder describes your session label. In a multilevel system, the label builder enables you to choose your session clearance. To view a sample label builder for a multilevel session, see Figure 3-4.
To change the clearance, click the Trusted Path clearance, then click a clearance that you want.
To change the label, click the Trusted Path label, then click the label that you want.
The trusted desktop appears.
Workstations can be restricted to a limited range of session clearances and labels. For example, a workstation in a lobby might be limited to PUBLIC labels only. If the label or session clearance that you specify is not accepted, check with an administrator to determine if the workstation is restricted.
In a standard login, the shell initialization files are sourced at startup to provide a customized environment. In a failsafe login, the default values are applied to your system and no shell initialization files are sourced.
In Trusted Extensions, a failsafe login is protected. Only the root account can access a failsafe login.