Configuring Kerberos - Quantum Scalar i40 User Manual

Chapter 4: Configuring the Library
Working With LDAP User Accounts (Remote Authentication)

Configuring Kerberos

90
Use Kerberos if you want to use Microsoft Active Directory without
Windows Services for Unix 2.5.
Make sure that both the library and the Kerberos server are set to the
same time (within 5 minutes). Otherwise, the authentication will fail. It
is recommended that you use Network Time Protocol (NTP) to
synchronize the time between the library and the Kerberos server. See
Setting the Date and Time Using the Network Time Protocol
You can configure the Kerberos® settings any time after the initial
library configuration. Before you can configure Kerberos, you need to
generate the service keytab file on your Kerberos (AD) server. For
instructions, see Generating the Kerberos Service Keytab File
page 91.
You must have administrative privileges to configure Kerberos.
You can only configure Kerberos on the Web client.
Web Client
1 Select Setup > User Management > Remote Authentication.
The Setup - Remote Authentication screen appears.
2 Under Authentication Type, do one of the following:
• To enable Kerberos, select Kerberos (Active Directory®): and
continue with
• To disable Kerberos, select LDAP or Local Only and continue with
Step 6.
• To modify Kerberos configuration settings, continue with
Step 3.
3 Type the Kerberos settings into the following Kerberos fields:
• Realm — The Kerberos realm name, typed in all uppercase
letters. Usually the realm name is the DNS domain name.
• KDC (AD Server) — The server on which Kerberos is installed.
• Domain Mapping — The domain portion of the library's fully
qualified domain name.
4 Upload the service keytab file. This is a file you generate on your
Kerberos (AD) server. If you have not already generated this file, do
Step 3.
Quantum Scalar i40 and Scalar i80 User's Guide
on page 50.
on