Installing, Configuring and Administering the Kerberos Server V 2.0 on HP-UX 11i
Administration
Using Groups to Control Settings
Chapter 6 155
Using Groups to Control Settings
You can modify the default values used for new principals in the
Principal Information window. These default values are stored in a
default group for the realm. Each realm has one default group.
The values you specify for the default group are inherited by all new
principals in that realm. A default group is similar to a template, that
controls the settings for a new principal. This template is called
default@REALM. It is automatically added to the principal database
when a new realm is created.
When adding or editing a single principal, you may elect to override the
group’s default values. If the defaults set during installation are not
what you commonly use for new principals, then edit the default group
for the realm. Note that the settings for the previously created principals
are not changed by editing the settings for the template.
To edit the default group
Step 1. In the kadminl_ui window, choose the Principals tab and select the
realm.
Step 2. Click New to open the Principal Information window.
Step 3. From the Edit menu, choose Edit Defaults Group. The Group
Information window appears.
Step 4. Set the new default values in the General tab, the Password tab and the
Attributes tab. The fields contained in these tabs are identical to the
fields in the corresponding Principal Information tabs.
Step 5. Close the Group Information window by clicking OK.
Step 6. Close the Principal Information window by clicking Cancel.
You can also edit the default group by selecting the default@REALM
principal from the List of Principals on the Principals tab. Click
Edit to open the Principal Information window, and then enter the
information on the various tabs.