To use Kerberos authentication, configure System Manager with the required information for the Kerberos server.
Before you begin
If you use Firefox to gain access to System Manager, do the following:
In the web browser, type about:config.
Select the network.negotiate-auth.trusted-uris attribute.
Right-click, select Modify, and add the URL of System Manager.
Log on to System Manager with admin privileged credentials.
Procedure
On the System Manager web console, click Users > Administrators.
In the navigation pane, click User Services > External Authentication.
On the External Identity Repositories page, click Configure in the Authentication Servers section.
On the Authentication Servers page, select the Provision Kerberos Server option.
In the Provision Kerberos Server section, enter the following information:
DC Host Name (FQDN): Type your FQDN in the format machineName.domainName.com. For example, xyz.somecompany.com.
DC Computer Domain: Type the domain name of the Kerberos server.
Keytab File: Click Browse and select the Kerberos server key file.
Click Save.
Important:
When you log on to the Kerberos server using Single Sign-on (SSO), the system automatically authenticates you in the Domain Controller (DC) domain. Therefore, you cannot exit from UCM by using the Logout link. Close the web browser to exit the application.
