Editing the Kerberos 5 configuration file on the AE Services server

Last Updated : Oct 05, 2021 |

About this task

After you installed the Kerberos RPMs, edit the Kerberos 5 configuration file on AE Services server to update the Kerberos configuration file details, such as the hostname or realm name.

Procedure

  1. Log in to the AE Services command line interface as a root user.
  2. In the command prompt, run the following command: cd /etc.
  3. To open the Kerberos configuration file in a text editor, run the following command:

    vi <file name>.conf

    For example, you can run: vi krb5.conf.

  4. In the Kerberos configuration file, modify the parameters in bold: 
    [libdefaults]
default_realm = dcserver1.xyz.com
dns_lookup_realm = true
dns_lookup_kdc = true
default_tkt_enctypes = des-cbc-md5
default_tgs_enctypes = des-cbc-md5
[realms]
MNO.XYZ.COM= {
kdc = dc-sername.dcserver1.xyz.com:88
kpasswd_server = dc-sername.dcserver1.xyz.com:88 }
[domain_realm]
.xyz.com = MNO.XYZ.COM
  5. Save your changes.

Next Steps

Continue with the next procedure Importing the keytab file on the AE Server.