Monitoring And Maintaining Kerberos - Cisco WS-C4003 - Catalyst 4000 Chassis Switch Software Configuration Manual

Configuring Authentication
To encrypt a Telnet session, perform this task in privileged mode:
Task
Encrypt a Telnet session.
This example shows how to configure a Telnet session for Kerberos authentication and encryption:
Console> (enable) telnet encrypt kerberos 172.20.52.5

Monitoring and Maintaining Kerberos

These commands can be used to display and clear Kerberos configurations on the switch:
•
•
•
To display Kerberos configuration information, perform this task in privileged mode:
Task
Display Kerberos configuration information.
This example shows how to display Kerberos configuration information:
Console> (enable) show kerberos
Kerberos Local Realm:CISCO.COM
Kerberos server entries:
Realm:CISCO.COM,
Realm:CISCO.COM,
Kerberos Domain<->Realm entries:
Domain:cisco.com,
Kerberos Clients NOT Mandatory
Kerberos Credentials Forwarding Enabled
Kerberos Pre Authentication Method set to None
Kerberos config key:
Kerberos SRVTAB Entries
Srvtab Entry 1:host/niners.cisco.com@CISCO.COM 0 932423923 1 1 8 03;;5>00>50;0=0=0
Srvtab Entry 2:host/niners.cisco.edu@CISCO.EDU 0 933974942 1 1 8 00?58:127:223=:;9
Console> (enable)
To display Kerberos credentials information, perform this task in privileged mode:
Task
Display Kerberos credentials information.
This example shows how to display the Kerberos credentials:
Console> (enable) show kerberos creds
No Kerberos credentials.
Console> (enable)
Software Configuration Guide—Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4
27-38
show kerberos
show kerberos creds
clear kerberos creds
Server:187.0.2.1,
Server:187.20.2.1,
Realm:CISCO.COM
Chapter 27
Command
telnet [encrypt kerberos] host
Command
show kerberos
Port:750
Port:750
Command
show kerberos creds
Configuring Switch Access Using AAA
78-12647-02