Cyclades AlterPath OnBoard, Administrator'S Manual

Page: 216 / 460

Configuring Authentication
180 AlterPath OnBoard Administrator’s Guide
See “Configuring an Authentication Method for the OnBoard” on page
192 for how the OnBoard is assigned an authentication method on the
Config
→
Unit Authentication screen.
Configuring a Kerberos Authentication Server
When the administrative user goes to Config
→
Authentication or Config
→
Unit Authentication and selects Kerberos from the “Authentication Type”
pull-down menu, the fields shown in the following figure appear. If a
Kerberos authentication server has not previously been configured, the fields
are empty.
Figure 6-13:
Config
→
Authentication: Kerberos
If the Kerberos authentication server (which is also referred to as a Key
Distribution Center, or KDC) has previously been configured in either of the
authentication configuration screens, the fields are filled in with the
previously-configured values.
Before configuring a Kerberos server, the administrative user must obtain the
needed information from the server’s administrator. The administrative user
enters the information in the following two fields, which display when the
Kerberos authentication type is selected:
• Kerberos Server IP address
• Kerberos Realm Domain Name
Caution! The Kerberos KDC rejects tickets when the timestamp on an
authentication request from a host is not within the maximum clock skew time
specified in the KDC’s
hdc.conf
file. Therefore, it is essential for the time
on the OnBoard to be synchronized with the time on the KDC.