Hitachi VSP Gx00 series

You can use the authentication server without knowing the host names and port
numbers, if you r
egister the information of the authentication server as an SRV record in
the DNS server. If you register multiple numbers of authentication servers to the SRV
record, you can determine the authentication server to be used, based on the priority
that has been set in advance.
Authentication server protocols
Authentication servers support the following protocols:
■
LDAPv3 simple bind authentication
■
RFC 2865-compliant RADIUS with PAP and CHAP authentication
■
Kerberos v5
The following certicate le formats are available for LDAP server settings:
■
X509 DER format
■
X509 PEM format
One of the following encryption types must be used for the Kerberos server:
Windows
■
AES128-CTS-HMA
C-SHA1-96
■
RC4-HMAC
■
DES3-CBC-SHA1
■
DES-CBC-CRC
■
DES-CBC-MD5
Solaris or Linux
■
DES-CBC-MD5
Authorization server requirements
The authorization server must satisfy the follo
wing requirements if it works together with
the authentication server:
Prerequisite OS
■
Windo
ws Server 2003
■
Windows Server 2003 R2
■
Windows Server 2008
■
Windows Server 2008 R2
Authentication server protocols
Chapter 5: Setting up security
System Administrator Guide for VSP Gx00 models and VSP Fx00 models 158