Settings
Table 3-9 Kerberos Authentication
Callout | Area on the screen | Information or capability that the area provides |
|
|
|
1 | HP EWS tabs and menus | For more information, see Navigating through the |
|
| HP Embedded Web Server. |
|
|
|
2 | Kerberos Default Realm | The Kerberos Default Realm is the fully qualified domain |
|
| name of the Kerberos realm (domain). |
|
|
|
3 | Kerberos Server Hostname | The Kerberos Server Hostname can be the same as the |
|
| Kerberos Default Realm if a DNS service is available |
|
| (Domain Name Service) and correctly configured. The |
|
| device will use DNS to look up the first available KDC (Key |
|
| Distribution Center) on the network. If DNS is not |
|
| available, the IP address of the Kerberos Server may be |
|
| used. |
|
|
|
4 | Kerberos Server Port | The Kerberos Server Port is the default IP port used by |
|
| the Kerberos authentication method. Note that the default |
|
| is port 88, but this can be different in different network |
|
| environments. Please contact your IT administrator to |
|
| determine the appropriate port if the default port does not |
|
| work. |
|
|
|
5 | LDAP Server Bind Method | The LDAP Server Bind Method determines how the |
device will access the LDAP server.
● Anonymous. Select this option to connect to the LDAP server if the LDAP server does not require user credentials to access the LDAP database.
● Simple. Select this option to connect to the LDAP server if the LDAP server requires user credentials to use the LDAP database.
When this option is selected, you must enter the user, password, and domain. Note that the password will be sent across the network unencrypted.
● Simple over SSL. Select this option to connect to the LDAP server if the LDAP server requires user credentials to use the LDAP database. This option supports Kerberos v2.
When this option is selected, you must enter the user, password, and domain.
NOTE This option is not available for all products.
● Kerberos.The selected LDAP (Active Directory) Server requires user credentials. A Kerberos ticket will be obtained from the Kerberos (Active Directory) Server and used to authenticate to the LDAP Server. The Password will be sent across the network encrypted and will be unreadable to a third party.
In order to use Kerberos as a bind method, you must first configure Kerberos settings. If using "user's credentials", make sure that Kerberos Authentication is required for
46 Chapter 3 Configuring the product from the Settings screens | ENWW |