Chapter 3 Security Configuration
90
Print Server Settings
• Print Server Name – The Print Server name is used in the
KDC database and can be configured in the Administration
page. If this name is changed, the corresponding name in the
KDC database must be changed accordingly to match it.
Default: “<prod>_xxxxxx” where “xxxxxx” is the serial number
or the last six digits of the network adapter’s Ethernet address.
“<prod>” is the product model number (e.g. M302_01234).
• Renew Lifetime – The maximum time allowed before a new
Kerberos password is needed. If the password has not been
changed within the renew lifetime, a warning message displays
in the next logon. If the renew lifetime is zero, there is no time
limit imposed on the password.
Default: 0 seconds (no limit).
• Enable Kerberos Authentication – This check box is used to
enable/disable the Kerberos authentication within the Print
Server. If it is selected, the Print Server uses Kerberos to
authenticate with the Access Point during its boot up process.
Default: disabled (i.e. the check box is not selected).
Key Distribution Center (KDC) Settings
• KDC Port – The TCP port of the Kerberos server.
Default: 88.
• KDC Name – The Kerberos server name.
Default: krbtgt
• KDC Realm – The Kerberos realm in which the Kerberos
server, the Access Point, and the Print Server are operating.
Default: LOCALREALM
• Clock Skew – The maximum time difference allowed between
the Kerberos server and the Print Server. This has to be the
same setting in the Access Point.
Default: 300 seconds.