kerberos

The kerberos configuration type updates to BDD's Kerberos configuration.

Depending on the specified options, kerberos can do the following:
To update BDD's Kerberos configuration, run the following from the Admin Server:
./bdd-admin.sh publish-config kerberos [operation] <option>

kerberos requires one of the following operations.

Operation Description
on Enables Kerberos. The -k, -t, and -p options must also be specified.
config Updates BDD's Kerberos configuration. At least one option must be specified.

This is the command's default behavior, so this operation is optional. You can only use this if Kerberos is already enabled.

kerberos supports the following options.

Option Description
-k, --krb5 <file> Updates the location of krb5.conf in all BDD configuration files. <file> must be the new absolute path to the file.

krb5.conf must be moved to its new location on all BDD nodes before running this option.

-t, --keytab <file> Publishes the specified keytab file to all BDD nodes. <path> must be the absolute path to the new keytab file.

The script renames this file bdd.keytab and copies it to $BDD_HOME/common/kerberos.

-p, --principal <principal> Publishes the specified principal to all BDD nodes. This option can't be used to change the primary component of the principal.

For more information on updating your Kerberos configuration, see Updating BDD's Kerberos configuration.