Penguin
Note: You are viewing an old revision of this page. View the current version.

Setting up Kerberos 5

Your Kerberos realm is normally the same as your DNS name, in capital letters. Therefore, if your DNS name is element.tla, your Kerberos realm will be ELEMENT.TLA

Under debian, install the following packages:

libkrb53 krb5-clients krb5-config krb5-doc krb5-user libpam-krb5 krb5-admin-server krb5-kdc

Run the following the set up kerberos (AddToMe)

kdb5_util create -r ELEMENT.TLA -s echo "*/admin@ELEMENT.TLA *" > /etc/krb5kdc/kadm5.acl kadmin.local

addprinc root/admin@ELEMENT.TLA ktadd -k /etc/krb5kdc/kadm5.keytab kadmin/admin kadmin/changepw quit

/etc/init.d/krb5-kdc restart /etc/init.d/krb5-admin-server restart