Avaya IPBS2 - Update Script for Configuration of Kerberos Clients

February 2016
Installation and Operation Manual
Avaya IP-DECT Base Station & IP-DECT Gateway version 7.2.x
161
Appendix B: Update Script for Configuration of Kerberos Clients
The update script is as follows:
mod cmd UP1 check resetn serial002
config add NTP0 /addr 192.168.42.136
config write
config activate
vars create CMD0/KCMD p <join+realm="negrealm1"+user="neguser1"+
password="negpwd1"+force="true"+disable-local="true"+kerberos-rc4=
"true"><server+realm="negrealm1"+address="192.168.42.34"><server+
realm="negrealm2"+addres="192.168.42.99"/></join>
Description of the update script:
Command line 1:
mod cmd UP1 check resetn serial002
By inserting this into the update script file the update server will check the variable “check” and
if the value (serial002) is different from the value in the update server this script will be
executed and the box will be rebooted afterwards.
Command line 2:
config add NTP0 /addr 192.168.42.136
By inserting this into the update script the local Time server is configured with IP address to
valid time server and active time can be retrieved. Correct time is very important in Kerberos for
joining of realm and for login purpose.
Command line 3:
vars create CMD0/KCMD p ....
The format of this line is very important. It is very important to only modify the data surrounded
with double quote (“”). This script describes the mandatory data, the other data is set to default
values. All parameters set by the Add-tab (see section 1) is possible to set with this script.
The XML format is as follows:
<join realm="..." host="..." user="..." password="..." disable-
local="..." force="..."><server realm="..." address="..." port="..."
secondary-address="..." secondary-port="..."/></join realm>
realm: The realm to join
host: The host name for the box (optional, otherwise the hardware id will be used)
user: Admin user name from the Kerberos server
password: Admin password from the Kerberos server
disable-local: the config flag will be set accordingly (true or false, optional, defaulting to
false)
force: tells if an existing realm membership shall be discarded (true or false, optional,
defaulting to false)
server: multiple servers may be given
In the above example two servers are configured one for the Kerberos server and one if using an
Active Directory or Standby Kerberos server.