dc-list <dc-list> | Specifies a list of domain controller names, separated by commas. |
default-domain | Use the default domain if no other domain is configured. |
kerberos enctype [aes128] [aes256] [arcfour] | Specifies the Kerberos encryption type. The following encryption types can be specified: • aes128 - specifies the aes128-cts-hmac-sha1-96 cipher • aes256 - specifies the aes256-cts-hmac-sha1-96 cipher • arcfour - specifies the arcfour-hmac-md5 cipher Entering no encryption type removes the existing encryption type. |
kerberos realm <realm-name> kdc-list <list> | Specifies Kerberos configuration settings such as the realm and the key distribution center (KDC) list. The KDC is part of the Windows domain controller and provides the authentication service and the ticket-granting service. Clients and servers trust KDCs to maintain shared keys and construct properly encrypted tickets granting clients access to services. |
log-level <0-10> | Specifies the level of detail for the log. The log-level 10 option provides the most debug messages related to domain authentication. Use this level to collect debug-level messages when troubleshooting a problem. Increasing the log level can result in dropped connections or an authentication time out. |
max-log-size <kilobytes> | Specifies the maximum size of the log file. This setting increases the buffer to hold domain authentication debug messages. |
no-ipv6-lookups | Disable IPv6 lookups. When enabled, this setting prevents unnecessary IPv6 lookups between the server-side SteelHead and the DNS server. |
pwd-refresh-int <no-of-days> | Specifies the password refresh interval in number of days. |