Originally posted by: SystemAdmin

I will be installing Kerberos Client on one of my AIX servers shortly.

I have a few questions.

In one document, it lists the configuration command as:

mkkrb5clnt -c KDC -r realm -a admin -s server -d domain -A -i database -K -T
In another document:

config.krb5 -C -r MYREALM -d austin.ibm.com -c w2k.austin.ibm.com -s
w2k.austin.ibm.com

Which method is preferred?

Also

If something goes wrong, how do I back out the configuration
Also.....Why are my posts missing "line breaks"?

Thanks!

DaveZ
#AIX-Forum

Originally posted by: otones

Hi ,

For me is preferred to use the mkkrb5clntd command. It does aditionals configurations like adding host/servername@REALMNAME principal to the kerberos principals database.
Also you can add the root/servername@REALNAME principal and configure the default login in the AIX server to use the Kerberos authentication.

I recommend you to read the manpage (for mkkrb5clnt command) an Network Authentication Service manuals for config.krb5 command.

If you use config.krb5 command basically it configures the /etc/krb5/krb5.conf file and you must manually to do the rest of the tasks.

To unconfigure it use the -U flag for mkkrb5clnt command and remove manually the principals:

host/servername@REALMNAME
root/servername@REALNAME

if you decide to configure them.

Bye....
#AIX-Forum