Update Script For Configuration Of Kerberos Clients - Avaya IPBS1 Installation And Operation Manual

Installation and Operation Manual
Avaya IP-DECT Base Station & IP-DECT Gateway version 7.2.x
Appendix B: Update Script for Configuration of Kerberos Clients
The update script is as follows:
mod cmd UP1 check resetn serial002
config add NTP0 /addr 192.168.42.136
config write
config activate
vars create CMD0/KCMD p <join+realm="negrealm1"+user="neguser1"+
password="negpwd1"+force="true"+disable-local="true"+kerberos-rc4=
"true"><server+realm="negrealm1"+address="192.168.42.34"><server+
realm="negrealm2"+addres="192.168.42.99"/></join>
Description of the update script:
Command line 1:
By inserting this into the update script file the update server will check the variable "check" and
if the value (serial002) is different from the value in the update server this script will be
executed and the box will be rebooted afterwards.
Command line 2:
By inserting this into the update script the local Time server is configured with IP address to
valid time server and active time can be retrieved. Correct time is very important in Kerberos for
joining of realm and for login purpose.
Command line 3:
The format of this line is very important. It is very important to only modify the data surrounded
with double quote (""). This script describes the mandatory data, the other data is set to default
values. All parameters set by the Add-tab (see section 1) is possible to set with this script.
The XML format is as follows:
<join realm="..." host="..." user="..." password="..." disable-
local="..." force="..."><server realm="..." address="..." port="..."
secondary-address="..." secondary-port="..."/></join realm>
: The realm to join
realm
: The host name for the box (optional, otherwise the hardware id will be used)
host
: Admin user name from the Kerberos server
user
: Admin password from the Kerberos server
password
disable-local
false)
: tells if an existing realm membership shall be discarded (true or false, optional,
force
defaulting to false)
: multiple servers may be given
server
In the above example two servers are configured one for the Kerberos server and one if using an
Active Directory or Standby Kerberos server.
February 2016
mod cmd UP1 check resetn serial002
config add NTP0 /addr 192.168.42.136
vars create CMD0/KCMD p ....
: the config flag will be set accordingly (true or false, optional, defaulting to
161