User's Manual

TD 92579EN
15 February 2012 / Ver. H
Installation and Operation Manual
IP-DECT Base Station & IP-DECT Gateway (software version 5.0.x)
165
Appendix F: Update Script for Configuration of Kerberos Clients
The update script is as follows:
mod cmd UP1 check resetn serial002
config add NTP0 /addr 192.168.42.136
vars create CMD0/KCMD p
<join+realm="negrealm1"+user="neguser1"+password="negpwd1"+
force="true"+disable-local="true"><server+realm="negrealm1"+
address="192.168.42.34"/><server+realm="negrealm2"+address=
"192.168.42.99"/></join>
Description of the update script:
Command line 1:
mod cmd UP1 check resetn serial002
By inserting this into the update script file the update server will check the variable “check”
and if the value (serial002) is different from the value in the update server this script will be
executed and the box will be rebooted afterwards.
Command line 2:
config add NTP0 /addr 192.168.42.136
By inserting this into the update script the local Time server is configured with IP address to
valid time server and active time can be retrieved. Correct time is very important in Kerberos
for joining of realm and for login purpose.
Command line 3:
vars create CMD0/KCMD p ....
The format of this line is very important. It is very important to only modify the data
surrounded with double quote (“”). This script describes the mandatory data, the other data
is set to default values. All parameters set by the Add-tab (see section 1) is possible to set
with this script.
The XML format is as follows:
<join realm="..." host="..." user="..." password="..." disable-
local="..." force="..."><server realm="..." address="..." port="..."
secondary-address="..." secondary-port="..."/></join realm>
realm
: The realm to join
host: The host name for the box (optional, otherwise the hardware id will be used)
user: Admin user name from the Kerberos server
password: Admin password from the Kerberos server
disable-local: the config flag will be set accordingly (true or false, optional, defaulting to
false)
force: tells if an existing realm membership shall be discarded (true or false, optional,
defaulting to false)
server: multiple servers may be given
In the above example two servers are configured one for the Kerberos server and one if
using an or Standby Kerberos server.