Chapter 3 Configuring Your Library
Working With User Accounts
Scalar i500 User’s Guide
98
Fill in the following Kerberos fields in addition to all the LDAP fields:
•
Realm
— The Kerberos realm name, typed in all uppercase letters.
Usually the realm name is the DNS domain name.
•
KDC (AD Server)
— The server on which Kerberos is installed.
•
Domain Mapping
— The domain portion of the library’s fully qualified
domain name.
•
Service Keytab
— Click the
Browse
button to select the service keytab
file. The service keytab file is a file you generate on your Kerberos
(AD) server. To generate the file, follow these instructions:
Generating the Service Keytab file
3
1
Set up an Active Directory domain on the Windows 2003 server.
2
At the command prompt, enter
dcpromo
.
3
Windows 2003 servers only:
Install Windows Support Tools on the
Windows 2003 server as follows:
a
Go to
www.microsoft.com
and search for “windows server 2003
support tools sp2” or click on the following link:
http://www.microsoft.com/downloads/details.aspx?FamilyID
=96a35011-fd83-419d-939b-9a772ea2df90&DisplayLang=en
b
Download both
support.cab
and
suptools.msi
.
c
Run
suptools.msi
to begin installation.
4
Create a computer account in Active Directory.
• Do not select any of the checkboxes during creation.
• The account name will be used for <computer account> fields
shown in the following steps.
5
At the command prompt, map SPN to the computer account. Use the
following format:
setspn -A library/<fqdn of library> <computer account>
For example:
setspn -A library/delos.dvt.mycompany.com kerbtest