Using Web Administration

Edit online

You can use Web Administration Tool to create a Kerberos entry.

About this task

Under Server administration expand the Manage security properties category in the navigation area of the Web Administration Tool. If your server supports Kerberos, that is, it has the kerberos supported capabilities OID 1.3.18.0.2.32.30, select the Kerberos tab. If your server does not support Kerberos, this tab is not displayed.

Procedure

  1. Select the Enable Kerberos authentication check box to enable Kerberos authentication.Note: You must have a Kerberos client installed to use Kerberos authentication.
  2. Select the Map Kerberos IDs to LDAP DNs check box to enable the directory administrator to use the existing set of ACL data with the Kerberos authentication method. See Identity mapping for Kerberos for more information.
  3. Enter the Kerberos realm using the format hostName.domainName, for example, TEST.AUSTIN.IBM.COM.This format is case insensitive.
  4. Enter the path and file name of the Kerberos keytab file. This file contains the private key of the LDAP server, as associated with its kerberos account. This file, and the SSL key database file, should be protected.
  5. If you are logged in as the directory administrator, enter the Alternate administrator ID using the format ibm-kn=value@realm or ibm-KerberosName=value@realm for example, ibm-kn=root@TEST.AUSTIN.IBM.COM. This field cannot be edited by members of the administrative group.Note: This ID must be a valid ID in your Kerberos realm. This ID value is case insensitive.
  6. When you are finished, click Apply to save your changes without exiting, or click OK to apply your changes and exit, or click Cancel to exit this panel without making any changes.