Avaya DECT R4 Installation And Administration Manual page 126

Installing and operating the IPBS and IPBL
Configuring the secondary Kerberos server
The Kerberos server is crucial when using Kerberos authentication. Therefore, Avaya
recommends having a secondary Kerberos server in the IP-DECT system. The secondary
server is used if the primary server is not working properly. Set up the secondary Kerberos
server on the Standby Master.
To configure an IPBS as a secondary Kerberos server:
1. Ensure that the IP address of an NTP time server is specified. Select General > NTP.
2. Select General > Kerberos Server.
3. Enter the root password for the secondary Kerberos server, which should be the same as
the password used for the primary server. This password is used to encrypt the information
stored on the server.
4. Click OK. The secondary Kerberos server is enabled.
5. Enter the realm name in the Realm field.
6. Enter the IP address of the primary Kerberos server in the Master field in the LDAP
Replication section. LDAP is used to replicate the primary server database. For more
information about LDAP, see
7. Select the Enable check box.
8. Click OK.
9. Click OK again to perform the LDAP replication.
Each client must also be configured with the secondary server information.
10. Select General > Admin.
11. Go to the Authentication Servers section.
12. In the Secondary Address field of the Kerberos server, enter the IP address of the
secondary Kerberos server. In the secondary Kerberos server, enter 127.0.0.1 (localhost)
as the IP address. The Port field is filled out automatically.
13. Click OK.
Deleting a user or trusted realm
To delete a user account from the Kerberos server:
1. Select General > Kerberos Server.
2. In the Users section, select the Delete check box to delete the user.
3. Click OK.
To delete a trusted realm relationship from the Kerberos server:
1. Select General > Kerberos Server.
2. In the Trusted Realms section, select the Delete check box to delete the realm.
126
Avaya DECT R4 - Installation and Maintenance Guide
LDAP on page 145.
02/2016