Kerberos clients can be configured quickly and easily by using the Oracle Solaris Automated Installer (AI) feature. AI server administrators create and assign Kerberos configuration profiles to AI clients. Additionally, the AI server delivers the client keys. Therefore, at installation, the Kerberos client is a fully provisioned Kerberos system, capable of hosting secure services. Using the Automated Installer can lower system administration and maintenance costs.
You can use the kclient command to create automated installation for clients of any type of KDC.
You can use AI for clients that are not clients of an Oracle Solaris KDC. For the list of KDC vendors, see the kclient(1M) man page.
For all KDC types, pre-generated keytab transfer is supported. Oracle Solaris KDC and MS AD also support auto-registering.
You run the kclient command to create Kerberos configuration profiles for AI. For more information, see the kclient(1M) man page and Kerberos Client Configuration Options. For instructions to configure Kerberos clients through the AI, see How to Configure Kerberos Clients Using AI in Installing Oracle Solaris 11.2 Systems .