PAM Kerberos Release Note, HP 9000 Networking

16 Chapter1
PAM Kerberos Release Note
Configuration
Configuration
Kerberos Configuration
There are three kinds of nodes in a Kerberos network authentication environment: Key
Distribution Center (KDC), Application Client, and Application Server, as shown in the figure
below.
Figure 1-1. A Kerberos Network Authentication Environment
In the following sections, we will address the configuration questions below:
• What files need configuring on which nodes?
• What is the purpose of the different configuration files?
• What changes are required in the configuration file?
• What are the configuration procedures?
KDC
The KDC is the node that supplies tickets and session keys for use in authentication of
network principals.
The supported KDC are Kerberos Version 5 KDC servers including Microsoft Windows 2000
KDC and MIT KDC (version 1.0 or 1.1).
The KDC requires proper configuration of the following files:
Application
Client
(PC)
Application
Client
(HP-UX)
Application
Server
(HP-UX)
ftp
ftp,
telnet
(Windows
2000 or
MIT
Kerberos)
KDC