System Administration Guide: Security Services

Administering Kerberos Principals (Task Map)

Task 

Description 

For Instructions 

View the list of principals. 

View the list of principals by clicking the Principals tab. 

How to View the List of Kerberos Principals

View a principal's attributes. 

View a principal's attributes by selecting the Principal in the Principal List, then clicking the Modify button. 

How to View a Kerberos Principal's Attributes

Create a new principal. 

Create a new principal by clicking the Create New button in the Principal List panel. 

How to Create a New Kerberos Principal

Duplicate a principal. 

Duplicate a principal by selecting the principal to duplicate in the Principal List, then clicking the Duplicate button. 

How to Duplicate a Kerberos Principal

Modify a principal. 

Modify a principal by selecting the principal to modify in the Principal List, then clicking the Modify button. 

Note that you cannot modify a principal's name. To rename a principal, you must duplicate the principal, specify a new name for it, save it, and then delete the old principal. 

How to Modify a Kerberos Principal

Delete a principal. 

Delete a principal by selecting the principal to delete in the Principal List, then clicking the Delete button. 

How to Delete a Kerberos Principal

Set up defaults for creating new principals. 

Set up defaults for creating new principals by choosing Properties from the Edit menu. 

How to Set Up Defaults for Creating New Kerberos Principals

Modify the Kerberos administration privileges (kadm5.acl file).

Command-line only. The Kerberos administration privileges determine what operations a principal can perform on the Kerberos database, such as add and modify.

You need to edit the /etc/krb5/kadm5.acl file to modify the Kerberos administration privileges for each principal.

How to Modify the Kerberos Administration Privileges