Parts of the configuration process depend on other parts and must be done in a specific order. These procedures often establish services that are required to use the Kerberos service. Other procedures are not dependent on any order, and can be done when appropriate. The following task map shows a suggested order for a Kerberos installation.
Task |
Description |
For Instructions |
---|---|---|
1. Plan for your Kerberos installation. |
Lets you resolve configuration issues before you start the software configuration process. Planning ahead saves you time and other resources in the long run. | |
2. (Optional) Install NTP. |
Configures the Network Time Protocol (NTP) software, or another clock synchronization protocol. In order for the Kerberos service to work properly, the clocks on all systems in the realm must be synchronized. | |
3. Configure the KDC servers. |
Configures and builds the master KDC and the slave KDC servers and the KDC database for a realm. | |
4. (Optional) Increase security on the KDC servers. |
Prevents security breaches on the KDC servers. | |
5. (Optional) Configure swappable KDC servers. |
Makes the task of swapping the master KDC and a slave KDC easier. |