Managing Kerberos and Other Authentication Services in Oracle^® Solaris 11.3

Configuring KDC Servers

After you install the Kerberos software, you must connect clients to existing Key Distribution Center (KDC) servers, or configure a master KDC and at least one slave KDC. KDCs issue credentials. These credentials are the basis for the Kerberos service, so the KDCs must be configured before you attempt other tasks.

You can choose to configure and build the master KDC server, the database, and additional servers on Oracle Solaris with the kdcmgr utility or manually.

Perform the following procedures to configure KDC servers:

• Install the KDC package from your IPS repository – How to Install the KDC Package

• Enable the use of FIPS 140-2-validated algorithms only – How to Configure Kerberos to Run in FIPS 140-2 Mode

• Use a script to configure the KDCs –

  • How to Use kdcmgr to Configure the Master KDC

  • How to Use kdcmgr to Configure a Slave KDC

  • Example 6, Running the kdcmgr Command Without Arguments

• If you are configuring your KDC server manually, follow the instructions on the MIT Kerberos Documentation web site (http://web.mit.edu/kerberos/krb5-1.14/doc/index.html), while keeping in mind Native Oracle Solaris Features Integrated With Kerberos.