Configuration Guide for Kerberos Client Products on HP-UX 11.0 | HP-UX 11i v1 | HP-UX 11i v1.6 | HP-UX 11i v2

Conﬁguring the Kerberos Environment

Server Conﬁguration Procedures

Chapter 380

The krb.conf ﬁle, with the default values for all the sections generated

by the auto-conﬁguration tool is as shown below:

Your_Realm_NAme

Your_Realm_Name Your_Secondary_Server1

Your_Realm_Name Your_Secondary_Server2

Your_Realm_Name host.subdomain.domain.com admin server

The krb.realms ﬁle, with the default values generated by the

auto-conﬁguration tool is as shown below:

Your_Primary_Security_Server Your_Realm_Name #

.Your_Secondary_Security_Server Your_Realm_Name #

*.Your_Domain_Name Your_Realm_Name #

Manual Conﬁguration of the Kerberos Server

Step 1. Install the Kerberos Server. For more information on carrying out this

step,refer to the “Installing, Conﬁguring and Administering theKerberos

Server V 2.0 on HP-UX 11i” (T1417-90003).

Step 2. Create and modify the conﬁguration ﬁles /opt/krb5/krb.conf, and

/opt/krb5/krb.realms.

Step 3. Create the Database using the kdb_create command.

# /kdb_create “Your_Realm_Name” -s

Step 4. Use kadminl to add the administrative principals to the Kerberos

database.

# /opt/krb5/admin/kadminl

Step 5. Create an admin_acl_file.

Step 6. Start the Kerberos daemons on the Primary Security Server. Edit the

/etc/rc.config.d/krbsrv ﬁle to reﬂect the following values:

KDC = 1

ADMD = 1

Type, /sbin/init.d/krbsrv start

You can also start the kerberos daemons by typing the following

commands at the command prompt:

shell% /opt/krb5/sbin/kdcd