12: User Authentication
SLCâ„¢ 8000 Advanced Console Manager User Guide 248
Kerberos Commands
These commands for the command line interface correspond to the web page entries described
above.
To configure the SLC unit to use Kerberos to authenticate users who log in via the Web,
SSH, Telnet, or the console port:
set kerberos <one or more parameters>
Parameters
allowdialback <enable|disable>
breakseq <1-10 Chars>
clearports <Port List>
custommenu <Menu Name>
dataports <Port List>
dialbacknumber <Phone Number>
escapeseq <1-10 Chars>
group <default|power|admin>
ipaddr <Key Distribution Center IP Address>
kdc <Key Distribution Center>
listenports <Port List>
permissions <Permission List>
port <Key Distribution Center TCP Port>
realm <Kerberos Realm>
state <enable|disable>
useldapforlookup <enable|disable>
To set user group and permissions for Kerberos users:
set kerberos group <default|power|admin>
To set permissions for Kerberos users not already defined by the user rights group:
set kerberos permissions <Permission List>
where
<Permission List> is one or more of nt, sv, dt, lu, ra, sk, um, dp, do,
ub, rp, rs, rc, dr, wb, sn, ad, md, sd
To remove a permission, type a minus sign before the two-letter abbreviation for a user
right.
To set a default custom menu for Kerberos users:
set kerberos custommenu <Menu Name>
To view Kerberos settings:
show kerberos