HP Serveur lame HP ProLiant BL680c G5 - Manual (Page 42)

For example, when the clock skew among the machines is too large, the following log message
is written: Thu Jun 25 16:55:09 2009] [error] client
2001:db8:c18:1:b8ca:fcdf:d49d:b5c6] mod_spnego: Kerberos SSO
(QueryContextAttributes) failed; SSPI: The function requested is not
supported\r\n(-2146893054) .
The following levels of user authorizations are available:
•
Administrator
Users with Administrator access can view all information provided through HP SMH. The
appropriate default user group, Administrators for Windows operating systems and and the
root user on Linux operating systems always has administrative access.
•
Operator
Users with Operator access can view and set most information provided through HP SMH.
Some web applications limit access to the most critical information to administrators only.
•
User
Users with User access can view most information provided through HP SMH. Some web
applications restrict viewing of critical information from individuals with User access.
To enable or disable Kerberos and add groups to the allowed Kerberos group list, complete the
following steps for each level of access.
Kerberos support is provided on a per-user basis.
Kerberos Administrator
To add a Kerberos Administrator:
1.
Select Settings from the menu.
2. In the System Management Homepage box, click the Security link.
3. Click the Kerberos Authorization link.
4. In the Kerberos Configuration area, select the box beside Enable Kerberos Support.
5. In the Group Name textbox, enter a name in the group@REALM format or REALM\group
Only alphanumeric and underline values are permitted. The use of special characters such as
~ ' ! # $ % ^ & * ( ) + = / " : ' < > ? , | ; are not permitted.
6. Click the Administrator radio button beside Type.
7. Click Add. The values entered are added as a new line in the list table.
You can continue to add groups with administrative access by following Step 5 through Step
7 .
8. Click Apply.
To remove a Kerberos Administrator:
1.
Select Settings from the menu.
2. In the System Management Homepage box, click the Security link.
3. Click the Kerberos Authorization link.
4. Click the check box beside the Group Name in the dynamic list that you want to remove from
HP SMH.
5. Click Remove.
6. Click Apply.
Kerberos Operator
To add a Kerberos Operator:
1.
Select Settings from the menu.
2. In the System Management Homepage box, click the Security link.
42 The Settings page