Thunderstone Search Appliance Manual

Authorization Method

The Authorization Method setting controls what Results Authorization method(s) are used by the Parametric Search Appliance when verifying user access to search result URLs. See the Results Authorization section (here) for details. The possible settings are:

• None: No access verification; return all search results to all users. This is the default. It is also the setting that should be used for a Meta Search profile, even if one or more of its back-end profiles does use Results Authorization: the request and response for credentials will automatically be passed back and forth from front-end Meta Search to back-end profiles, which will handle the authorization (not the front-end).

• Forward login cookies: The Parametric Search Appliance will forward login cookies from the user to the result URL. This is for custom HTML-form-based single-sign-on systems (e.g. CAS).

• Basic/NTLM/file - prompt via form: The Parametric Search Appliance will prompt the user for their credentials with a form, then send them to the result URL via HTTP Basic, NTLM or Windows/SMB file authentication.