Configuring Windows workstations
This step is optional for configuring a Kerberos server in PASE for i. If you intend to create a single sign-on environment after configuring the Kerberos server, you must complete this step. If not, skip to Step 9 (Configuring network authentication service).
Configure the client workstations as part of a workgroup by setting the Kerberos realm and Kerberos server on the workstation. You also need to set a password that is associated with the workstation.
To configure the workstations, complete these steps:
- From a command prompt on the Windows workstation,
C:> ksetup /setdomain MYCO.COM C:> ksetup /addkdc MYCO.COM kdc1.myco.com
- Set the local machine account password by entering this
at the Windows workstation command prompt:
C:> ksetup /setmachpassword secret1
- Map John Day's Kerberos user principal (day@MYCO.COM) to
his Windows user name (johnday). Enter this at
the Windows workstation command prompt:
C:> ksetup /mapuser day@MYCO.COM johnday
- To verify that John Day's Kerberos user principal maps
to his Windows user name, enter this at the Windows workstation command prompt:
and view the results.
- Restart the PC for the changes to take effect.
- Repeat these steps for Karen Jones' workstation, but specify
the following information:
- Local machine account password: secret2
- Kerberos user principal: jones@MYCO.COM
- Windows user name: karenjones