Table 5-9
Kerberos page
Item
Description
Manually Specify Configuration
Manually configure the print server for Kerberos authentication. Click
Next
to display
the
Kerberos Settings
page.
Import Configuration Files
Configure the print server for Kerberos authentication by importing configuration files.
●
conf File
Enter or browse to the krb5.conf file. In the
libdefaults
section,
include the
default_realm
and
clockskew
tag entries. In the
realms
section, include the
kdc
tag entry.
●
keytab File
Enter or browse to a Kerberos keytab file. Use the Ktpass.exe
command-line tool (the version prior to Microsoft Windows Server 2008 Support
Pack 1) to generate the keytab file. Use the principal name type
KRB5_NT_PRINCIPAL, and the encryption type DES-CBC-MD5.
●
Time Sync Period
Specify the time interval (in minutes) that the HP Jetdirect
print server requests to synchronize its clock with a simple network time protocol
(SNTP) time server.
●
SNTP Server
Specify the FQDN or IP address of an SNTP time server, if
required. By default, the SNTP server is the server used as the key distribution
center (KDC).
Click
Next
to return to the
Identity Authentication
page, and confirm that Kerberos
status indicates that it is
Configured
.
Kerberos Settings
Use the wizard to manually configure Kerberos account settings on the print server.
1.
Use the
Kerberos Settings
page to provide Kerberos account and configuration settings.
2.
Click
Next
to return to the
Identity Authentication
page, and confirm that Kerberos status
indicates
Configured
.
Table 5-10
Kerberos Settings page
Item
Description
KDC Server
FQDN of the domain controller used as the Kerberos KDC.
The FQDN consists of the device's host name and domain name. For example,
kdc01.support.hp.com
is a fully qualified domain name, where
kdc01
is the host
name and
support.hp.com
is the domain name.
Principal Realm
Kerberos principal realm in the form
principal@REALM
.
A unique
principal
name is associated with each Kerberos account. For the
HP Jetdirect print server active directory account, the principal is the user name for
the print server.
A Kerberos realm is similar in concept to a Microsoft Windows domain and contains
all the users, computers and services within a Kerberos installation. The realm is
case-sensitive, and is typically the DNS domain name specified in all uppercase
characters. For example, if the domain name is hp.com, the realm is HP.COM.
Password
Password for the HP Jetdirect account configured on active directory.
Encryption Type
Encryption type supported by the HP Jetdirect print server.
Key Version Number
Version number for the encryption keys associated with the principal and password.
116 Chapter 5 IPsec/Firewall configuration (V.45.xx.nn.xx)
ENWW
Содержание Jetdirect 640n
Страница 1: ...HP Jetdirect Print Servers Administrator s Guide J8025A 640n J8024A 695n HP Jetdirect Firmware V 45 ...
Страница 2: ......
Страница 3: ...HP Jetdirect Print Servers Administrator s Guide Firmware V 45 xx nn ...
Страница 24: ...14 Chapter 2 HP software solutions summary ENWW ...
Страница 114: ...104 Chapter 4 HP Embedded Web Server V 45 xx nn xx ENWW ...
Страница 148: ...138 Chapter 7 Troubleshoot the HP Jetdirect print server ENWW ...
Страница 202: ...192 Appendix C HP Jetdirect control panel menus V 45 xx nn xx ENWW ...
Страница 220: ...210 Appendix D Open source licensing statements ENWW ...
Страница 226: ...216 Index ENWW ...
Страница 227: ......
Страница 228: ... 2012 Hewlett Packard Development Company L P www hp com ...