Hitachi Virtual Storage Platform G600 - Page 126

auth.kerberos.<a
ttribute>=<value>
auth.group.<realm name>.<attribute>=<value>
A full example is shown below:
auth.server.type=kerberos
a
uth.group.mapping=true
auth.kerberos.default_realm=example.com
auth.kerberos.dns_lookup_kdc=true
auth.kerberos.clockshow=300
auth.kerberos.timeout=10
auth.group.example.com.searchdn=CN=sample1,CN=Users,DC=domain,DC=localauth.
group.example.com.searchpw=passwordauth.ldap.PrimaryServer.basedn=CN=Users,
DC=domain,DC=local
The Kerberos attributes are dened in the following table.
Table 7 Kerberos denition (for authentication server)
Attribute Description
Required /
Optional Default value
auth.server.type Type of an authentication
server. Specify kerberos.
Required None
auth.group.mappin
g
Information about whether to
work together with an
authorization server
■
true: W
orks together
■
false: Does not work
together
Optional false
auth.kerberos.defa
ult_realm
Default realm name Required None
Creating a Kerberos conguration le
Chapter 4: User administration
System Administrator Guide for VSP Gx00 models and VSP Fx00 models 126