User Manual

176
9. Authentication
9.1.10 Idle Timeout
You can specify amount of time in minutes the console server waits before it terminates an idle ssh, pmshell or web
connection.
• Select Serial and Network: Authentication.
• Web Management Session Timeout specifies the browser console session idle timeout in minutes. The default setting is
20 minutes.
• CLI Management Session Timeout specifies the ssh console session idle timeout in minutes. The default setting is to
never expire.
• Console Server Session Timeout specifies the pmshell serial console server session idle timeout in minutes. The default
setting is to never expire.
9.1.11 Kerberos Authentication
The Kerberos authentication can be used with UNIX and Windows (Active Directory) Kerberos servers. This form of
authentication does not provide group information, so a local user with the same username must be created and permissions
set.
Note: Kerberos is very sensitive to time differences between the Key Distribution Center (KDC) authentication server and the client device.
Make sure NTP is enabled and the time zone is set correctly on the console server.
When authenticating against Active Directory, the Kerberos Realm will be the domain name and the Primary KDC will be the
address of the primary domain controller.