Appendix B Kerberos Enabled Wireless NIC Configuration
Configuring the Print Server for Kerberos Authentication
1.Create a user in the Windows 2000 server that identifies the Print Server.
NOTE: The user name should be the Print Server’s name. The password selected will be used as the Kerberos password and should be set with no expiration.
2.In a secure networked environment, log in as a root user via Telnet in the wired LAN.
3.Once logged in, use the Telnet commands to set up the wireless LAN parameters (e.g. SSID = 103, operating mode = Infra Structure mode, etc.) that match the Access Point configuration.
In addition to the normal wireless LAN parameter settings, use the following commands to enable Kerberos on the wireless LAN interface and Kerberos for authentication (minimum settings):
4.Set the wireless LAN interface parameters to enable Kerberos. store kerberos opts auth
5.Set the Kerberos parameters to enable Kerberos authentication.
The Kerberos password must match the Windows 2000 user password for the Print Server. The administrator should choose at least 9 alphanumeric characters with a combination of upper and lower case.
The following is a suggestion for creating strong password for computer security. Make sure the password:
•is at least seven characters long. The most secure passwords are seven to 14 characters long.
•contains characters from each of the following groups:
letters (uppercase and lowercase), numerals, and symbols (all characters not defined as letters or numerals, i.e., ! @ # $ % ^ & *, etc.)
284
