beautypg.com

Printronix Network Interface Card User Manual

Page 311

background image

Store Commands

311

WLAN

ADAPTER,

WLAN

Enables or disables Kerberos:

store kerberos opts [-]auth

Sets the maximum allowable amount of clock skew in seconds
or minutes that Kerberos authentication will tolerate before
assuming that a Kerberos message is invalid:

store kerberos config clockskew

The time units cannot be mixed and there must at least be one
space between the value and the time unit
(s or m). The default is 300 seconds, (i.e. five minutes). The
minimum allowable value is 60 seconds (i.e. 1 minute). The
maximum allowable value is 900 seconds (i.e. 15 minutes).

NOTE: The Microsoft step-by-step Guide to Kerberos 5 (krb5 1.0)

Interoperability recommends that your system clock be
sychronized within two minutes to the KDC system’s clock.
Otherwise, clock skew errors will cause Kerberos
authentication to fail. If this is the case, the clock skew
default may need to scale down to two minutes.

WLAN

ADAPTER,

WLAN

Sets the maximum allowable ticket lifetime in seconds, minutes,
hours, or days:

store kerberos config tktlife

is between 300 seconds and 259200 seconds (3
days). The time units cannot be mixed and there must be at
least one space between the value and the time
units (s, m, h, or d). Default value is 43200 seconds.

WLAN

ADAPTER,

WLAN

Sets the maximum allowable renewable lifetime in seconds,
minutes, hours, or days:

store kerberos config renewlife

is 0 (i.e. no limit) or between 300 seconds
and 604800 seconds (7 days). The time units cannot be mixed
and there must be at least one space between the
value and the time unit (s, m, h, or d).
Default value is 0.