Kerberos V5 Installation Guide

Release: 1.2

Document Edition: 1.1

Last updated: @today

• Copyright
• Introduction
  • What is Kerberos and How Does it Work?
  • Why Should I use Kerberos?
  • Please Read the Documentation
  • Overview of This Guide
• Realm Configuration Decisions
  • Kerberos Realms
  • Mapping Hostnames onto Kerberos Realms
  • Ports for the KDC and Admin Services
  • Slave KDCs
  • Hostnames for the Master and Slave KDCs
  • Database Propagation
• Building Kerberos V5
  • Build Requirements
  • Unpacking the Sources
  • Doing the Build
    • Building Within a Single Tree
    • Building with Separate Build Directories
    • Building Using `lndir'
  • Testing the Build
    • The DejaGnu Tests
    • The KADM5 Tests
  • Options to Configure
  • `osconf.h'
  • Shared Library Support
  • Operating System Incompatibilities
    • AIX
    • Alpha OSF/1 V1.3
    • Alpha OSF/1 V2.0++
    • BSDI
    • HPUX
    • Solaris versions 2.0 through 2.3
    • Solaris 2.X
    • SGI Irix 5.X
    • Ultrix 4.2/3
  • Using `Autoconf'
• Installing Kerberos V5
  • Installing KDCs
    • Install the Master KDC
      • Edit the Configuration Files
      • Create the Database
      • Add Administrators to the Acl File
      • Add Administrators to the Kerberos Database
      • Create a kadmind Keytab
      • Start the Kerberos Daemons on the Master KDC
    • Install the Slave KDCs
      • Create Host Keys for the Slave KDCs
      • Extract Host Keytabs for the KDCs
      • Set Up the Slave KDCs for Database Propagation
    • Back on the Master KDC
      • Propagate the Database to Each Slave KDC
    • Finish Installing the Slave KDCs
      • Create Stash Files on the Slave KDCs
      • Start the krb5kdc Daemon on Each KDC
    • Add Kerberos Principals to the Database
    • Limit Access to the KDCs
    • Switching Master and Slave KDCs
  • Installing and Configuring UNIX Client Machines
    • Client Programs
    • Client Machine Configuration Files
      • Mac OS X Configuration
  • UNIX Application Servers
    • Server Programs
    • Server Configuration Files
    • The Keytab File
    • Some Advice about Secure Hosts
• Upgrading Existing Kerberos V5 Installations
  • Upgrading to Triple-DES Encryption Keys
• Bug Reports for Kerberos V5
• Files
  • krb5.conf
  • kdc.conf
    • Encryption Types and Salt Types