Lexmark C792 Lexmark Document Distributor - Page 42

Configuring LDD servers for Kerberos authentication, Lexmark Document Distributor 4.4, SDK Guide

Page 42 highlights

Configuring LDD servers for Kerberos authentication When using Kerberos authentication, you may need to configure Kerberos on each LDD server in your system. The LDD server requesting a ticket must have the KDC address and realm available in order to request a Kerberos ticket. Often, the KDC address and realm can be determined from the ticket forwarded from the printer. In this case, no configuration is necessary. A warning is included in the log indicating that the server is attempting to determine the KDC address and realm from a forwarded ticket. To manually configure each LDD server for Kerberos authentication, do one of the following: • Create a Kerberos configuration file for the server. This file may be a duplicate of the file uploaded to configure Kerberos on the printer, but we recommend a minimal configuration specifying only the KDC address and realm. The configuration file must be named krb5.ini, and it should be placed in the folder \Lexmark\Solutions\Security where LDD is installed on each LDD server. (You may have to create the Security folder.) Note: If you need to read the Keberos configuration file from another location, see the Apache Tomcat documentation for more information. • Set the KDC address and realm from the script. For more information, see the Lexmark Document Distributor 4.4 SDK Guide. Installing Lexmark Document Distributor 42

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141

Configuring LDD servers for Kerberos authentication
When using Kerberos authentication, you may need to configure Kerberos on each LDD server in your system.
The LDD server requesting a ticket must have the KDC address and realm available in order to request a Kerberos
ticket. Often, the KDC address and realm can be determined from the ticket forwarded from the printer. In this case,
no configuration is necessary. A warning is included in the log indicating that the server is attempting to determine
the KDC address and realm from a forwarded ticket.
To manually configure each LDD server for Kerberos authentication, do one of the following:
Create a Kerberos configuration file for the server. This file may be a duplicate of the file uploaded to configure
Kerberos on the printer, but we recommend a minimal configuration specifying only the KDC address and realm.
The configuration file must be named krb5.ini, and it should be placed in the folder \Lexmark\Solutions\Security
where LDD is installed on each LDD server. (You may have to create the Security folder.)
Note:
If you need to read the Keberos configuration file from another location, see the Apache Tomcat
documentation for more information.
Set the KDC address and realm from the script. For more information, see the
Lexmark Document Distributor 4.4
SDK Guide
.
Installing Lexmark Document Distributor
42