Go to main content

Managing Kerberos and Other Authentication Services in Oracle® Solaris 11.3

Exit Print View

Updated: May 2019
 
 

How to Install the KDC Package

By default, Kerberos client software is installed on your system, but the Key Distribution Center (KDC) software is not. To install a KDC, you must add the KDC package.

Before You Begin

You must be assigned the Software Installation rights profile to add packages to the system. The initial user has this right as does the root role. For more information, see Using Your Assigned Administrative Rights in Securing Users and Processes in Oracle Solaris 11.3.

  1. Install the KDC package.
    $ pkg install security/kerberos-5/kdc

    For more information about package installation, see the pkg(1) man page.

  2. (Optional) List the Kerberos services.

    With the addition of the server package, your system has three Kerberos services, two for the KDC and one for the Kerberos client. These services are disabled until you configure Kerberos and then explicitly enable the services.

    $ svcs -a krb5
    STATE          STIME    FMRI
    disabled       Sep_10   svc:/security/kerberos-5/krb5kdc:default
    disabled       Sep_10   svc:/security/kerberos-5/krb5_prop:default
    $ svcs -a | grep kerb
    STATE          STIME    FMRI
    disabled       Sep_07   svc:/security/kerberos-5/install:default