User`s guide

Web Manager for OnSite Administrators 279
Configuration>Security>Authentication
T To Configure a Kerberos Authentication
Server [Expert]
Perform this procedure to configure a Kerberos authentication server when
the OnSite or any of its ports is configured to use the Kerberos authentication
method or any of its variations (Kerberos, Local/Kerberos, Kerberos/Local, or
KerberosDownLocal).
Before starting this procedure, find out the following information from the
Kerberos server’s administrator:
• Realm name and KDC address
• Host name and IP address for the Kerberos server
Also, work with the Kerberos server’s administrator to ensure that following
types of accounts are set up on the Kerberos server and that the administrators
of the OnSite and connected devices know the passwords assigned to the
accounts:
• An account for “admin”
• If Kerberos authentication is specified for the OnSite, accounts for all
users who need to log into the OnSite to administer connected devices.
• If Kerberos authentication is specified for KVM or serial ports, accounts
for users who need administrative access to connected devices
1. Make sure an entry for the OnSite and the Kerberos server exist in the
OnSite’s /etc/hosts file.
a. Go to Configuration>Network>Host Table in Expert mode.
The “Host Table” screen appears.
b. Add an entry for OnSite if none exists and an entry for the Kerberos
server.
i. Click “Add.”
The “New/Modify Host” dialog appears.
ii. Enter the address in the “IP Address” field.
iii. Enter the name in the “Name” field.
iv. If desired, enter an optional alias in the “Alias” field.
2. Make sure that timezone and time and date settings are synchronized on
the OnSite and on the Kerberos server.