Creating a Kerberos Realm (BUI)
Use the following procedure to create a Kerberos realm, set the KDC(s), and select strong or weak encryption types. Descriptions of each property are located in Kerberos Service Properties.
Before You Begin
Ensure that you have configured the NTP service.
- Go to Configuration > Services.
-
To enable the Kerberos service, click the enable icon
for Kerberos.
- Click Kerberos.
-
In the Realm field, type the Kerberos realm.
For familiarity, the realm name can be the same as your DNS domain name, except that the realm name is in uppercase.
-
In the KDC(s) field, type the host name of the KDC administrative
server.
If your Kerberos configuration includes DNS support for KDC lookup, leave this field blank.
-
If you have another KDC, click the add icon
next to KDC(s) and type its host name. Repeat for each
additional KDC.
If your configuration includes DNS support, do not complete this step.
-
To allow support for weak encryption types, such as DES and Exportable ArcFour
with HMAC/md5, select Allow weak encryption types.
The default does not support weak encryption types.
-
Click APPLY.
To reset the properties to their original values, click REVERT instead.
Next Steps
Choose one of the following options: