fix bugs in examples, add more restrictions, use example.com as an

example. From: Pavel Ferdan <xferdan@informatics.muni.cz>


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13543 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2004-03-19 15:06:30 +00:00
parent 8177991133
commit ec3cd13d0c

View File

@@ -44,15 +44,18 @@ Kerberos realm.
@example
unix% kadmin
kadmin> ank -pw password host/datan.my.domain
kadmin> ank --password=password host/datan.example.com
@end example
You must configure the Workstation as a member of a workgroup, as opposed
The name @code{datan.example.com} should be replaced with DNS name of
the workstation.
You must configure the workstation as a member of a workgroup, as opposed
to a member in an NT domain, and specify the KDC server of the realm
as follows:
@example
C:> ksetup /setdomain MY.REALM
C:> ksetup /addkdc MY.REALM kdc.my.domain
C:> ksetup /setdomain EXAMPLE.COM
C:> ksetup /addkdc EXAMPLE.COM kdc.example.com
@end example
Set the machine password, i.e. create the local keytab:
@@ -60,6 +63,9 @@ Set the machine password, i.e. create the local keytab:
C:> ksetup /setmachpassword password
@end example
The password used in @code{ksetup /setmachpassword} must be the same
as the password used in the @code{kadmin ank} command.
The workstation must now be rebooted.
A mapping between local NT users and Kerberos principals must be specified,