InfoPrint 6500 Series User Manual page 31

Kerberos Enabled Wireless Ethernet Configuration
Configuring the Print Server for Kerberos Authentication
1. Create a user in the Windows 2000 (or later) server that identifies the
Print Server.
NOTE: The user name should be the Print Server's name. The password
selected will be used as the Kerberos password and should be set
with no expiration.
2. In a secure networked environment, log in as a root user via Telnet in the
wired LAN.
3. Once logged in, use the Telnet commands to set up the wireless LAN
parameters (e.g. SSID = 103, operating mode = Infra Structure mode,
etc.) that match the Access Point configuration.
In addition to the normal wireless LAN parameter settings, use the
following commands to enable Kerberos on the wireless LAN interface
and Kerberos for authentication (minimum settings):
4. Set the wireless LAN interface parameters to enable Kerberos.
store kerberos opts auth
5. Set the Kerberos parameters to enable Kerberos authentication.
The Kerberos password must match the Windows 2000 user password
for the Print Server. The administrator should choose at least 9
alphanumeric characters with a combination of upper and lower case.
The following is a suggestion for creating strong password for computer
security. Make sure the password:
•
is at least seven characters long. The most secure passwords are
seven to 14 characters long.
•
contains characters from each of the following groups: letters
(uppercase and lowercase), numerals, and symbols (all characters
not defined as letters or numerals, i.e., ! @ # $ % ^ & *, etc.)
The kname is default to "krbtgt" which is the default name used in Windows
2000 KDC. It must be configured to match with the KDC if the default is
changed. The krealm is case sensitive; it must match the Access Point's
realm.
The SSID of the Print Server must be configured to match the Access Point's
SSID which also has Kerberos enabled. For example, if a Windows 2000 user
created the password aBcd-12345 and the Access Point's realm is set to
REALM.IBM.COM, the following telnet commands are used:
store kerberos password aBcd-12345
store kerberos config krealm REALM.IBM.COM
NOTE: If the Kerberos authentication fails, the user will not be able to Telnet
to the Print Server via the wireless LAN interface. In this case, Telnet
to the Print Server via the wired LAN interface. It should display an
error message indicating the reason for the Kerberos authenticaion
failure.
31