Enabling Kerberos; Defining The Kerberos Local-Realm - Cisco WS-C4003 - Catalyst 4000 Chassis Switch Software Configuration Manual

Chapter 27 Configuring Switch Access Using AAA

Enabling Kerberos

To enable Kerberos authentication, perform this task in privileged mode:
Task
Step 1 Specify Kerberos as the authentication method.
Step 2 Verify the configuration.
This example shows how to enable Kerberos as the login authentication method for Telnet and verify the
configuration:
Console> (enable) set authentication login kerberos enable telnet
kerberos login authentication set to enable for telnet session.
Console> (enable) show authentication
Login Authentication: Console Session
---------------------
tacacs
radius
kerberos
local
Enable Authentication:Console Session
---------------------- ----------------- ----------------
tacacs
radius
kerberos
local
Console> (enable)
This example shows how to enable Kerberos as the login authentication method for the console and
verify the configuration:
Console> (enable) set authentication login kerberos enable console
kerberos login authentication set to enable for console session.
Console> (enable) show authentication
Login Authentication: Console Session
---------------------
tacacs
radius
kerberos
local
Enable Authentication:Console Session
---------------------- ----------------- ----------------
tacacs
radius
kerberos
local
Console> (enable)

Defining the Kerberos Local-Realm

The Kerberos realm is a domain consisting of users, hosts, and network services that are registered to a
Kerberos server. To authenticate a user defined in the Kerberos database, the switch must know the host
name or IP address of the host running the KDC and the name of the Kerberos realm.
78-12647-02
----------------
disabled
disabled
disabled
enabled(primary)
disabled
disabled
disabled
enabled(primary)
----------------
disabled
disabled
enabled(primary)
enabled
disabled
disabled
enabled(primary)
enabled
Software Configuration Guide—Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4
Command
set authentication login kerberos enable [all |
console | http | telnet] [primary]
show authentication
Telnet Session
----------------
disabled
disabled
enabled(primary)
enabled
Telnet Session
disabled
disabled
enabled(primary)
enabled
Telnet Session
----------------
disabled
disabled
enabled(primary)
enabled
Telnet Session
disabled
disabled
enabled(primary)
enabled
Configuring Authentication
27-31