Active Directory/Kerberos

Menu path: Setup > Security > Active Directory / Kerberos

  • Enable

    The Kerberos basic configuration will be carried out.

    The Kerberos basic configuration will not be carried out. (default)

  • Default domain (Fully Qualified Domain Name): This value must match the Windows domain on which the logon is to take place, e.g. EXAMPLE.COM.

    The value must be entered in upper case letters.
  • DNS lookup for domain controller

    In order to find the key distribution centers (KDCs, domain controllers) and other servers for a realm, DNS SRV records are used if they are not explicitly indicated. (default)

    The key distribution centers entered under Setup > Security > Active Directory/Kerberos > Domain 1 ... Domain 4 will be used.

  • DNS lookup for domain

    In order to determine the Kerberos realm of a host, DNS TXT records are used. (default)

    The details under Setup > Security > Active Directory / Kerberos > Domain Realm Mapping are used.

  • Obtain addressless tickets

    The first Kerberos ticket is addressless. This may be necessary if the client is located behind an NAT device (Network Address Translation). (default)

_____

Last update: July 25, 2018