Download Now - Group Logic

EXTREMEZ-IP KERBEROS SUPPORT
ExtremeZ-IP supports the Kerberos authentication protocol to provide single sign-on and secure authentication to Windows server resources from Mac OS X clients. Kerberos was added as an authentication
mechanism in the Apple Filing Protocol 3.1 in Mac OS X. This protocol extension defines how tickets are
passed between the Macintosh client and an AFP server. AFP is the basis for network file exchange on
Macintosh computers.
ExtremeZ-IP supports the Kerberos extensions in the AFP protocol, and works directly with Active Directory. It is registered as a Kerberos service provider and can authenticate Macintosh tickets. Since the
tickets themselves are a standard format within Kerberos, ExtremeZ-IP takes tickets from a Macintosh
and passes them to Microsoft Windows Active Directory for authentication then grants access to Windows server resources.
ExtremeZ-IP supports Kerberos by providing
• Secure, standardized authentication for Macintosh clients inside and outside the firewall
• Single Sign-On (SSO) support requires a user to login on once per session within a Windows Domain
Setting up ExtremeZ-IP to use Kerberos
To use Kerberos, follow the steps below for the server and each client.
Server Setup
1.
Make sure ExtremeZ-IP is running on a member of the network domain.
ExtremeZ-IP is set to use Kerberos by default. If you have not changed this setting, you are set up
correctly. If you have changed this setting, complete step 2.
2.
Open ExtremeZ-IP; from the ExtremeZ-IP Administrator, click Settings. Click the Security tab of
the Settings window. Place a check in the Allow Kerberos Logins checkbox.
ExtremeZ-IP User Manual
20