Chapter 3 Security Configuration
Print Server Settings

Print Server Name – The Print Server name is used in the KDC database and can be configured in the Administration page. If this name is changed, the corresponding name in the KDC database must be changed accordingly to match it.

Default: “<prod>_xxxxxx” where “xxxxxx” is the serial number or the last six digits of the network adapter’s Ethernet address. “<prod>” is the product model number (e.g. M302_01234).

Renew Lifetime – The maximum time allowed before a new Kerberos password is needed. If the password has not been changed within the renew lifetime, a warning message displays in the next logon. If the renew lifetime is zero, there is no time limit imposed on the password.

Default: 0 seconds (no limit).

Enable Kerberos Authentication – This check box is used to enable/disable the Kerberos authentication within the Print Server. If it is selected, the Print Server uses Kerberos to authenticate with the Access Point during its boot up process.

Default: disabled (i.e. the check box is not selected).

Key Distribution Center (KDC) Settings

KDC Port – The TCP port of the Kerberos server. Default: 88.

KDC Name – The Kerberos server name. Default: krbtgt

KDC Realm – The Kerberos realm in which the Kerberos server, the Access Point, and the Print Server are operating.

Default: LOCALREALM

Clock Skew – The maximum time difference allowed between the Kerberos server and the Print Server. This has to be the same setting in the Access Point.

Default: 300 seconds.

90