Reference9:General/Admin
Basic parameters for the Administration access of the device are configured here.
Device Name
The name of the device. This name is displayed in the browser as a title. It is also added to the product id sent with outgoing registrations. This way it is displayed e.g. on the registrations page of the PBX.
User/Password
The administrator account. This account can be used for telnet access (if configured) and all password protected pages of the web user interface. By default all pages except Administration/General/Info are password protected. The web server of the device can be configured to protect all pages. The password has to be entered twice.
The password cannot be left empty. If an empty password is entered, the password won't be changed. The length of the password is limited to 15 characters.
Additional Administrator Accounts
Additional user accounts. These user accounts can have viewer or full administrator privileges. The length of the password is limited to 15 characters.
Help URL
The URL to access the online help. By default an URL of "http://wiki.innovaphone.com/index.php?Title=Reference<major firmware version number>:<page name>" is used. This links to online help pages in the Reference namespace of the innovaphone wiki.
For example on a V9 device configure following Help URL to link to the local wikitogo installation:
http://192.168.0.100:8081/index.php?Title=Reference9:
Delegated Authentication
In v8 devices can delegate authentication of administrative users to an authentication server using Kerberos. To enable remote user authentication the device has to join the realm of an innovaphone Kerberos server. Delegated authentication can only be used with HTTPS.
Join realm
The server location of the realm has to be configured, first (see section "Authentication Servers").
Click "Join realm" and specify the username and password of an administrator in the target realm to add the device to the remote host database. This works only with innovaphone servers. If you want to authenticate users from a third-party server setup cross-realm authentication.
Leave realm
An administrator username and password from the realm is needed to deregister from the realm and remove the device from the remote host database. If the server does not exist any longer the registration can be deleted manually.
Disable local authentication
If this option is selected only users from the Kerberos server are accepted. Logins using local administrator accounts will be rejected. Activating this feature together with "Protect configuration at phone" option will disable you to make any changes on the phone.
Authentication Servers
The addresses of Kerberos servers have to be configured locally on each host or client device.
If there is no server configured for a realm, the device will try to locate it using DNS. Normally this should work for Windows servers in the LAN.