Sample KDC server definition file

Using a sample script, you can create and configure a Key Distribution Center (KDC) server on the same system as a NFS V4 server.

The script is located in the /usr/samples/nim/krb5 directory. The script helps you create a simple KDC environment that can be modified based on your needs or preference.
Note: Before you begin, review the config_rpcsec_server script.
The config_rpcsec_server script handles the following operations:
  • Creates a system user; the default is nim
  • Creates principals for the administrator and system user
  • Creates an NFS host key for the server
  • Creates realm-to-domain mapping
  • Creates a tar image of krb5 files for use by KDC slim clients
  • Refines the exports list
  • Recycles the NFS services
  • Re-exports NFS file systems and directories

Examples

To create a simple KDC environment using default values, type the following command:
config_rpcsec_server
To create a KDC environment using system user nimadmin as the user principal and password l0gin1 for the kadmin principal, type the following command:
config_rpcsec_server -p l0gin1 -u nimadmin