Planning for the Kerberos Service

This chapter should be studied by administrators who are involved in the installation and maintenance of the Kerberos service. The chapter discusses several installation and configuration options that administrators must resolve before they install or configure the service.

This is a list of the topics that a system administrator or other knowledgeable support staff should study:

• Why Plan for Kerberos Deployments?

• Planning Kerberos Realms

• Mapping Host Names Onto Realms

• Client and Service Principal Names

• Ports for the KDC and Admin Services

• The Number of Slave KDCs

• Which Database Propagation System to Use

• Clock Synchronization Within a Realm

• Client Configuration Options

• KDC Configuration Options

• Kerberos Encryption Types

• Online Help URL in the Graphical Kerberos Administration Tool