Managing Kerberos

Displaying Kerberos Settings

The following example shows a sample display of Kerberos settings:

Local> show kerb characteristics

Retransmit Interval:

 

Retransmit Timeout:

0 00:00:08

Ticket service port:

750

Password service port:

751

Realm:

mfg.acme.com

 

 

Secret:

(None)

 

 

Authorization Defaults:

 

 

 

Access:

(None)

Forced Callback:

DISABLED

Max Connect:

(None)

Dialout Service:

(None)

Dialback Number:

6111

 

 

Dialout Number:

(None)

 

 

Permissions:

DIALBACK, DIALOUT, LAT, TELNET, SLIP, PPP, NOPRIV

Port Configuration

You need to configure user authentication on the access server on a port-by-port basis. To enable the authentication on a given port, you enter a command such as:

LOCAL> DEFINE PORT 2 AUTHENTICATION ENABLED

Example: Sample SHOW PORT Command

After enabling authentication on a port, you can then display the port settings to verify that user authentication is enabled as shown in the following example:

Local> SHOW PORT 1

Port 1:smithServer:TSM700

.

.

.

Enabled Characteristics:

Authentication, Autoconnect, Autoprompt, Broadcast, Failover, Input Flow Control, Lock, Loss Notification, Message Codes, Output Flow Control, Lock Notification, Verification

Managing Access Server Security 22-9