Ensuring that the Kerberos server in IBM i PASE on System B has started

Before you configure cross-realm trust, you need to ensure that the IBM® i PASE Kerberos server has started.

Use the process statistics command to determine whether the IBM i PASE Kerberos server has started.
  1. In a character-based interface on System B, type call QP2TERM.
    This command opens an interactive shell environment in which you can work with IBM i PASE applications.
  2. At the command line, enter ps -ef | grep krb5.
    This command indicates that you want to view all the processing statistics for every process on the system that contains the string krb5. If the Kerberos server is running, you might see results displayed that are similar to the following example:
    > ps -ef | grep krb5
         qsys   113   1   0 08:54:04      -  0:00 /usr/krb5/sbin/krb5kdc
         qsys   123   1   0 08:54:13      -  0:00 /usr/krb5/sbin/kadmind
       $            
    
    If the Kerberos server is not started, you might see the following results displayed:
    > ps -ef | grep krb5
       $            
    
  3. If the Kerberos server is not started, follow these steps:
    1. At the command line, enter export PATH=$PATH:/usr/krb5/sbin, and press Enter.
    2. Enter start.krb5, and press Enter.
       > start.krb5
         Starting krb5kdc...
         krb5kdc was started successfully.
         Starting kadmind...
         kadmind was started successfully.
         The command completed successfully.
         $