Installing, Configuring and Administering the Kerberos Server V 2.0 on HP-UX 11i

Conﬁguration

Auto-Conﬁguration of the Security Server

Chapter 564

Auto-Conﬁguration of the Security Server

An automated tool named, krbsetup, has been provided to

auto-conﬁgure your Kerberos Server. Using this tool, you can

conﬁgure; un-conﬁgure; start and stop the kdcd and the kadmind

daemons.

This tool is installed at the following directory:

/opt/krb5/sbin

This tool will automatically create your krb.conf and krb.realms ﬁles

and places them in the /opt/krb5 directory. This tool allows you:

• specify whether you want to conﬁgure your Kerberos server as either

a Primary security server or a Secondary security server

• customize your realm name

• enables you with the option of creating a stash ﬁle

• allows you to specify the encryption type

The other sections in the conﬁguration ﬁles will be set to it’s default

values. If you want to customize these sections, you will have to

manually edit the conﬁguration ﬁles and restart the kdcd and kadmind

daemons using this tool. This tool also allows you to customize the

encryption type and stash ﬁle.

Refer to “Conﬁguration Files For The Kerberos Server” on page 63, for

more information.

NOTE It is strongly recommend that you use this tool to conﬁgure your basic

Kerberos Server.

Given below is a step-wise procedure to auto-conﬁgure your Kerberos

server:

Step 1. Run the utility, /opt/krb5/sbin/krbsetup

Step 2. Select one of the following options: