One of the following encryption types must be used for the Kerberos server:
Windows
• AES128-CTS-HMAC-SHA1-96
• RC4-HMAC
• DES3-CBC-SHA1
• DES-CBC-CRC
• DES-CBC-MD5
Solaris or Linux
• DES-CBC-MD5
Authorization server requirements
The authorization server must satisfy the following requirements if it works
together with the authentication server:
Prerequisite OS
• Windows Server 2003
• Windows Server 2003 R2
• Windows Server 2008
• Windows Server 2008 R2
• Windows Server 2012 R2
Prerequisite software
• Active Directory
Authentication protocol for user for searching
• LDAP v3 simple bind
Note: When using an LDAP server or a Kerberos server as an authentication
server, and combining it with an authorization server, use the same host for
the authentication and authorization servers.
When a RADIUS server is used as an authentication server, two
authentication servers (one primary and one secondary) can be specified, but
only one authorization server can be specified.
Connecting two authentication servers
Two authentication servers can be connected to a storage system. When the
servers are connected, the server configurations must be the same, except
for the IP address and the port.
226 Setting up security
System Administrator Guide for VSP Gx00 models and VSP Fx00 models
To Next Page
Loading...
