Users Guide
CACStar™UserGuideRevA03Copyright2014DigitalImagingTechnology Page13
Kerberos
IfLDAPisenabled,youmaychoosetouseKerberosauthenticationfortheLDAPserver.
KDCServerIP: IPaddressoftheKerberosserver
KDCServerPort: PortnumberoftheKerberosserver.Thedefaultis88.
KDCRealm: KerberosRealm
KDCPrincipal: UserName.Thiscan
beeithertheCNortheEDI‐PI,orSan
Principal.
PKINITWin2K
Thesettingaffectsthe"PublicKeyCryptographyforInitialAuthentication"inKerberos.Check
thisboxifyouareusingaWindows2000KDCServerand/orneedtousetheolderKerberos
PKINITcommand/replyset.
DisableReverseDNS
Lookups:
CheckthisboxtodisableReverseDNSLookupsbyKerberos(andLDAP).Thisisonlynecessaryif
thereisaproblemusingReverseDNSLookups.Ifthisboxischecked,hostnamesmustbeused
for"KDCServer"and"LDAPServer"inputfields.
MFDLDAPKerberosProxy
Ifenabledand
Kerberosisenabled,LDAPsearchesfromtheMFDwillbemodifiedtouse
KerberosAuthentication.TheLDAPServerandPortsettingsmustbecorrect.
MFDSMBKerberosProxy
IfenabledandKerberosisenabled,networkscan(SMB)operationsfromtheMFDwillbe
modifiedtouseKerberosauthentication.
DefaultSMB
ServerAddress
TheIPaddressorservernameforthedefaultSMBserver.ThisaddresswillbeusediftheSMB
serveraddresscannotbeobtainedfromtheprinter.
DefaultSMBServiceName
TheServiceNameforthedefaultSMBserver,e.g.myshare$.Thisnamewillbeusedasthe
principal
forKerberosauthenticationiftheServi ceNamecannotbeobtainedfromtheprinter.
DefaultSMBPassword
ThePasswordforthedefaultSMBserver.
Thisisonlyneededif"MFDSMBKerberosProxy"isNOTchecked‐ANDthe"SMBFolderName"
isconfigured.
SMBFolderName
IfaFolderNameis
configured,anyfoldernamethatisusedbytheprinterwillbereplacedwith
thisFolderName.Keywordscanbeusedinthisdefinitionsothefoldernameis"customized"
basedonthevalidateduser.
Thesekeywordsare:
%L‐expandstotheuser'slastname
%F‐expandstotheuser's
firstname
%M‐expandstotheuser 'smiddlename










