Page 178
Manual
ResistTel IP2 / IP152
ExResistTel IP2 / IP154
Access Right
Administrator / Viewer
Delegated Authentication
Devices with software V8 can delegate authentication of administrative users to an
authentication server using Kerberos. To enable remote user authentication the
device has to join the realm of a Kerberos server. Delegated authentication can only
be used with HTTPS.
The server location of the realm has to be configured, first (see section
"Authentication Servers"). Click "Join realm" and specify the username and password
of an administrator in the target realm to add the device to the remote host
database. This works only with special servers. If you want to authenticate users
from a normal third-party server setup cross-realm authentication.
Authentication Servers
The addresses of Kerberos servers have to be configured locally on each host or
client device.
If there is no server configured for a realm, the device will try to locate it using DNS.
Normally this should work for Windows servers in the LAN.
Clicking to the link Join realm, an input window with the following input parameter
will be opened:
Input
Description
Realm
Realm Name
Host name
Host name
Admin user name
Admin user name
Admin password
Admin password
Summary of Contents for ExResistTel IP2/IP154
Page 43: ...Manual ResistTel IP2 IP152 Page 43 ExResistTel IP2 IP154 Figure 9 Set View ...
Page 386: ...Page 386 Manual ResistTel IP2 IP152 ExResistTel IP2 IP154 ...
Page 387: ...Manual ResistTel IP2 IP152 Page 387 ExResistTel IP2 IP154 ...
Page 390: ...Page 390 Manual ResistTel IP2 IP152 ExResistTel IP2 IP154 ...