Sun Enterprise Authentication Mechanism 1.0.1 Guide

SEAM Configuration Task Map

Parts of the configuration process depend on other parts and must be done in a specific order. These procedures often establish services that are required to use SEAM. Other procedures are not dependent, and can be done when appropriate. The table below shows a suggested order for a SEAM installation.

Table 3-1 First Steps: SEAM Configuration Order


Task	Description	For Instructions, Go To ...
1. Plan for your SEAM Installation	Consider configuration issues and make decisions about them before starting the software installation process.	Chapter 2, Planning for SEAM
2. (Optional) Install NTP	In order for SEAM to work properly, the clocks on all systems in the realm must be kept in sync.	"Synchronizing Clocks between KDCs and SEAM Clients"
3. (Optional) Run SEAM preconfiguration procedure	To make the installation of a site with many hosts easier, the procedure can be run to store much of the installation information on an NFS server. This information can then be used during installation.	SEAM Installation and Release Notes
4. Configure the master KDC server	Steps to configure and build the master KDC server and database for a realm.	"How to Configure a Master KDC"
5. (Optional) Configure a slave KDC server	Steps to configure and build a slave KDC server for a realm.	"How to Configure a Slave KDC"
6. (Optional) Increase security on the KDC servers	Steps to prevent security breaches on the KDC servers.	"How to Restrict Access for KDC servers"
7. (Optional) Configure swappable KDC servers	Follow the steps in this procedure to make the task of swapping the master and a slave KDC easier.	"How to Configure a Swappable Slave KDC"

Once the required steps have been completed, the following procedures may be used when required.

Table 3-2 Next Steps: Additional SEAM Tasks


Task	Description	For Instructions, Go To ...
Configure cross-realm authentication	Steps to enable communications from one realm to another.	"Configuring Cross-Realm Authentication"
Configure SEAM application servers	Steps to enable a server to support services such as `ftp`, `telnet` and `rsh` using Kerberos authentication.	"Configuring SEAM Network Application Servers"
Configure SEAM clients	Steps to enable a client to use SEAM services.	"Configuring SEAM Clients"
Configure SEAM NFS server	Steps to enable a server to share a file system requiring Kerberos authentication.	"Configuring SEAM NFS Servers"
Increase security on an application server	Steps to increase security on an application server by restricting access to authenticated transactions only.	"How to Enable Only Kerberized Applications"