KDC Configuration Options - System Administration Guide: Security Services

Previous

Next

Document Information

Part I Security Overview

1. Security Services (Overview)

Part II System, File, and Device Security

2. Managing Machine Security (Overview)

3. Controlling Access to Systems (Tasks)

4. Virus Scanning Service (Tasks)

5. Controlling Access to Devices (Tasks)

6. Using the Basic Audit Reporting Tool (Tasks)

7. Controlling Access to Files (Tasks)

Part III Roles, Rights Profiles, and Privileges

8. Using Roles and Privileges (Overview)

9. Using Role-Based Access Control (Tasks)

10. Role-Based Access Control (Reference)

11. Privileges (Tasks)

12. Privileges (Reference)

Part IV Solaris Cryptographic Services

13. Solaris Cryptographic Framework (Overview)

14. Solaris Cryptographic Framework (Tasks)

15. Solaris Key Management Framework

Part V Authentication Services and Secure Communication

16. Using Authentication Services (Tasks)

19. Using Solaris Secure Shell (Tasks)

20. Solaris Secure Shell (Reference)

Part VI Kerberos Service

21. Introduction to the Kerberos Service

22. Planning for the Kerberos Service

Why Plan for Kerberos Deployments?

Planning Kerberos Realms

Mapping Host Names Onto Realms

Client and Service Principal Names

Ports for the KDC and Admin Services

The Number of Slave KDCs

Mapping GSS Credentials to UNIX Credentials

Automatic User Migration to a Kerberos Realm

Which Database Propagation System to Use

Clock Synchronization Within a Realm

Client Configuration Options

KDC Configuration Options

Kerberos Encryption Types

Online Help URL in the Graphical Kerberos Administration Tool

23. Configuring the Kerberos Service (Tasks)

24. Kerberos Error Messages and Troubleshooting

25. Administering Kerberos Principals and Policies (Tasks)

26. Using Kerberos Applications (Tasks)

27. The Kerberos Service (Reference)

Part VII Solaris Auditing

28. Solaris Auditing (Overview)

29. Planning for Solaris Auditing

30. Managing Solaris Auditing (Tasks)

31. Solaris Auditing (Reference)

KDC Configuration Options

Starting in the Solaris 10 5/08 and the Solaris Express Developer Edition 1/08 releases, there are several ways to configure a KDC. The simplest versions use the kdcmgr utility to configure the KDC automatically or interactively. The automatic version requires that you use command line options to define the configuration parameters. This method is especially useful for scripts. The interactive version prompts you for all information that is needed. See Table 23-1 for pointers to the instructions for using this command.

In addition, starting in the Solaris 10 5/08 and Solaris Express Developer Edition 1/08 releases, support for using LDAP to manage the database files for Kerberos has been added. See How to Configure a KDC to Use an LDAP Data Server for instructions. Using LDAP simplifies administration for sites that require better coordination between the Solaris Kerberos databases and their existing DS setup.

Previous

Next