Kerberos command, Kerberos and dsx, Table 61 kerberos commands – Raritan Computer DOMINION DSX-0N-E User Manual
Page 162
144
D
OMINION
SX
U
SER
G
UIDE
To view the current iptables ruleset
admin > Security >firewall >iptables –list
Clear the iptables rules
To clear the iptables rules.
admin > Security >firewall >iptables --flush
Save the configured settings
To save the iptables rules into the local database.
admin > Security >firewall >iptables-save
Execute this command once you have configured all the settings.
Kerberos Command
The kerberos command menu provides access to the commands used to configure the Kerberos
network authentication protocol. The Kerberos commands are listed in the table below.
Table 61 Kerberos Commands
C
OMMAND
D
ESCRIPTION
gethostnamefile
Get /etc/hosts in case of DNS failure file
getkrbconfig
Get kerberos 5 configuration file
kadmin
Kerberos admin client
kerberos
Kerberos based Network Authentication
kinit
get kerberos ticket
klist
list kerberos ticket
Kerberos and DSX
DSX can use kerberos authentication by using the following steps. As a result , Kerberos-based
network mutual authentication and symmetric [ a.k.a. private/secret] key cryptography can be
achieved in the CLI and GUI of the DSX for remote user authentication.
See
the
website for information about Kerberos, KDC, Kadmind , client machine
setup, and the FAQs related to these topics.
1. Set your krb5.conf stanzas and ftp it using getkrbconfig [ configuration settings available
]
2. Get a ticket use : kinit.
3. Use kadmin to add the keys to /etc/krb5.keytab for HTTP/FQDN@REALM and
host/FQDN@REALM .These keys are consistent across boots.
4. Remote authentication and authorization can be set up along with Kerberos
authentication. HTTP and telnet access will prompt you to enter username and password.
Currently Kerberos does not automatically map to local or remote usernames.
5. Enable Kerberos.
6. After a reboot, DSX is ready for secure telnet and HTTP protocol remote access.
Diagnostic Tips:
• Use the name command in the network menu to set the FQDN for DSX.
• Disable HTTP redirect from the services menu.
• Synchronize the time of the client machine. DSX machine, KDC and kadmind machines
using time menu and ntp option.