Avaya DECT R4 Installation And Administration Manual page 122

Installing and operating the IPBS and IPBL
The update script automatically disables the local login possibilities if the Kerberos client joining
was successful.
You can now change the password used in the script to a more secret password from the
Kerberos server page.
You can now log in to the Radio using the Kerberos login credentials. See
Kerberos on page 122.
Configuring the IPBS/IPBL as a client in a new system
Prerequisite: The IPBSs/IPBL delivered from the factory must have software version 4.1.x
pre-installed.
You can configure the Radios and the Kerberos Client by using Device Overview > Add and not
by browsing each Radio for configuration.
The Radios are in broadcast mode. None of the Radios are attached to the Master and
configured. If any of the Radios are attached to the Master and configured, detach the Radios
for this procedure to work.
1. Select Device Overview > Radios.
2. Click Add to add the Radio to the Master.
3. In the Add Radio window, enter a name for the device. You can also add a Standby Master
IP Address.
4. Go to the Kerberos section and enter the appropriate information in the following fields:
Realm: Enter the realm name of the Kerberos server.
Host name: (Optional) Enter the host name.
User: Enter the same user name defined in the Kerberos server.
Password: Enter the same password defined in the Kerberos server.
Disable local authentication: (Recommended) Select the check box.
Overwrite existing: (Optional) Select the check box.
5. Go to the Authentication Servers section.
6. In the Realm/Domain field, enter the realm name specified in the Kerberos server.
7. In the Address field, enter the IP address of the Kerberos server. In the Kerberos server,
enter 127.0.0.1 (localhost) as the IP address. The Port field is filled out automatically.
8. Click OK.
The Radio restarts and establishes a connection to the PARI Master only.
Logging in using Kerberos
1. Make sure that secure HTTPS protocol is used when logging in.
2. Log in on the client using a server account. When prompted for the user name, enter the
name of the realm in front of the user name, separated by a backslash in the following
way: REALM\username.
122
Avaya DECT R4 - Installation and Maintenance Guide
SeeUpdating script for configuration of Kerberos clients on page 200.
Logging in using
02/2016