Configuration Guide for Kerberos Client Products on HP-UX 11.0 | HP-UX 11i v1 | HP-UX 11i v1.6 | HP-UX 11i v2

Configuring the Kerberos Environment
Server Configuration Procedures
Chapter 3 77
Server Configuration Procedures
You will configure a Kerberos client in the same way, no matter whether
your KDC server is a Kerberos server on HP-UX 11i or a Microsoft 2000
KDC server. However, for a Microsoft Windows 2000 KDC server or the
Kerberos server on HP-UX 11i, the server configuration procedures are
different. To configure a Microsoft Windows 2000 KDC server or
Kerberos server on HP-UX 11i, you should follow the KDC Server
configuration instructions accompanied with your server software. The
server configuration information in this section is provided for reference
only.
Configuring KDC - Kerberos Server version 2.0 on
HP-UX 11i
Kerberos Server version 2.0 allows you to either manually configure your
Kerberos server or by using the krbsetup tool to auto configure the
server.
Given below is a summarized step-wise procedure to configure the KDC
server, both manually and by using the auto configure tool.
Auto-Configuration of Kerberos Server
version 2.0
Auto-Configuration of the Security Server An automated tool
named, krbsetup, has been provided to auto-configure your Kerberos
Server. Using this tool, you can configure; un-configure; start and stop
the kdcd and the kadmind daemons.
This tool is installed at the following directory:
/opt/krb5/sbin
This tool will automatically create your krb.conf and krb.realms files
and places them in the /opt/krb5 directory. This tool allows you:
• specify whether you want to configure your Kerberos server as either
a Primary security server or a Secondary security server
• customize your realm name