1*7f2fe78bSCy Schubert 2*7f2fe78bSCy Schubert<!DOCTYPE html> 3*7f2fe78bSCy Schubert 4*7f2fe78bSCy Schubert<html> 5*7f2fe78bSCy Schubert <head> 6*7f2fe78bSCy Schubert <meta charset="utf-8" /> 7*7f2fe78bSCy Schubert <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="generator" content="Docutils 0.17.1: http://docutils.sourceforge.net/" /> 8*7f2fe78bSCy Schubert 9*7f2fe78bSCy Schubert <title>Installation guide — MIT Kerberos Documentation</title> 10*7f2fe78bSCy Schubert <link rel="stylesheet" type="text/css" href="../_static/pygments.css" /> 11*7f2fe78bSCy Schubert <link rel="stylesheet" type="text/css" href="../_static/agogo.css" /> 12*7f2fe78bSCy Schubert <link rel="stylesheet" type="text/css" href="../_static/kerb.css" /> 13*7f2fe78bSCy Schubert <script data-url_root="../" id="documentation_options" src="../_static/documentation_options.js"></script> 14*7f2fe78bSCy Schubert <script src="../_static/jquery.js"></script> 15*7f2fe78bSCy Schubert <script src="../_static/underscore.js"></script> 16*7f2fe78bSCy Schubert <script src="../_static/doctools.js"></script> 17*7f2fe78bSCy Schubert <link rel="author" title="About these documents" href="../about.html" /> 18*7f2fe78bSCy Schubert <link rel="index" title="Index" href="../genindex.html" /> 19*7f2fe78bSCy Schubert <link rel="search" title="Search" href="../search.html" /> 20*7f2fe78bSCy Schubert <link rel="copyright" title="Copyright" href="../copyright.html" /> 21*7f2fe78bSCy Schubert <link rel="next" title="Installing KDCs" href="install_kdc.html" /> 22*7f2fe78bSCy Schubert <link rel="prev" title="For administrators" href="index.html" /> 23*7f2fe78bSCy Schubert </head><body> 24*7f2fe78bSCy Schubert <div class="header-wrapper"> 25*7f2fe78bSCy Schubert <div class="header"> 26*7f2fe78bSCy Schubert 27*7f2fe78bSCy Schubert 28*7f2fe78bSCy Schubert <h1><a href="../index.html">MIT Kerberos Documentation</a></h1> 29*7f2fe78bSCy Schubert 30*7f2fe78bSCy Schubert <div class="rel"> 31*7f2fe78bSCy Schubert 32*7f2fe78bSCy Schubert <a href="../index.html" title="Full Table of Contents" 33*7f2fe78bSCy Schubert accesskey="C">Contents</a> | 34*7f2fe78bSCy Schubert <a href="index.html" title="For administrators" 35*7f2fe78bSCy Schubert accesskey="P">previous</a> | 36*7f2fe78bSCy Schubert <a href="install_kdc.html" title="Installing KDCs" 37*7f2fe78bSCy Schubert accesskey="N">next</a> | 38*7f2fe78bSCy Schubert <a href="../genindex.html" title="General Index" 39*7f2fe78bSCy Schubert accesskey="I">index</a> | 40*7f2fe78bSCy Schubert <a href="../search.html" title="Enter search criteria" 41*7f2fe78bSCy Schubert accesskey="S">Search</a> | 42*7f2fe78bSCy Schubert <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Installation guide">feedback</a> 43*7f2fe78bSCy Schubert </div> 44*7f2fe78bSCy Schubert </div> 45*7f2fe78bSCy Schubert </div> 46*7f2fe78bSCy Schubert 47*7f2fe78bSCy Schubert <div class="content-wrapper"> 48*7f2fe78bSCy Schubert <div class="content"> 49*7f2fe78bSCy Schubert <div class="document"> 50*7f2fe78bSCy Schubert 51*7f2fe78bSCy Schubert <div class="documentwrapper"> 52*7f2fe78bSCy Schubert <div class="bodywrapper"> 53*7f2fe78bSCy Schubert <div class="body" role="main"> 54*7f2fe78bSCy Schubert 55*7f2fe78bSCy Schubert <section id="installation-guide"> 56*7f2fe78bSCy Schubert<h1>Installation guide<a class="headerlink" href="#installation-guide" title="Permalink to this headline">¶</a></h1> 57*7f2fe78bSCy Schubert<section id="contents"> 58*7f2fe78bSCy Schubert<h2>Contents<a class="headerlink" href="#contents" title="Permalink to this headline">¶</a></h2> 59*7f2fe78bSCy Schubert<div class="toctree-wrapper compound"> 60*7f2fe78bSCy Schubert<ul> 61*7f2fe78bSCy Schubert<li class="toctree-l1"><a class="reference internal" href="install_kdc.html">Installing KDCs</a><ul> 62*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="install_kdc.html#install-and-configure-the-primary-kdc">Install and configure the primary KDC</a></li> 63*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="install_kdc.html#edit-kdc-configuration-files">Edit KDC configuration files</a></li> 64*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="install_kdc.html#create-the-kdc-database">Create the KDC database</a></li> 65*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="install_kdc.html#add-administrators-to-the-acl-file">Add administrators to the ACL file</a></li> 66*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="install_kdc.html#add-administrators-to-the-kerberos-database">Add administrators to the Kerberos database</a></li> 67*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="install_kdc.html#start-the-kerberos-daemons-on-the-primary-kdc">Start the Kerberos daemons on the primary KDC</a></li> 68*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="install_kdc.html#install-the-replica-kdcs">Install the replica KDCs</a></li> 69*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="install_kdc.html#add-kerberos-principals-to-the-database">Add Kerberos principals to the database</a></li> 70*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="install_kdc.html#switching-primary-and-replica-kdcs">Switching primary and replica KDCs</a></li> 71*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="install_kdc.html#incremental-database-propagation">Incremental database propagation</a></li> 72*7f2fe78bSCy Schubert</ul> 73*7f2fe78bSCy Schubert</li> 74*7f2fe78bSCy Schubert<li class="toctree-l1"><a class="reference internal" href="install_clients.html">Installing and configuring UNIX client machines</a><ul> 75*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="install_clients.html#client-machine-configuration-files">Client machine configuration files</a></li> 76*7f2fe78bSCy Schubert</ul> 77*7f2fe78bSCy Schubert</li> 78*7f2fe78bSCy Schubert<li class="toctree-l1"><a class="reference internal" href="install_appl_srv.html">UNIX Application Servers</a><ul> 79*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="install_appl_srv.html#the-keytab-file">The keytab file</a></li> 80*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="install_appl_srv.html#some-advice-about-secure-hosts">Some advice about secure hosts</a></li> 81*7f2fe78bSCy Schubert</ul> 82*7f2fe78bSCy Schubert</li> 83*7f2fe78bSCy Schubert</ul> 84*7f2fe78bSCy Schubert</div> 85*7f2fe78bSCy Schubert</section> 86*7f2fe78bSCy Schubert<section id="additional-references"> 87*7f2fe78bSCy Schubert<h2>Additional references<a class="headerlink" href="#additional-references" title="Permalink to this headline">¶</a></h2> 88*7f2fe78bSCy Schubert<ol class="arabic simple"> 89*7f2fe78bSCy Schubert<li><p>Debian: <a class="reference external" href="http://techpubs.spinlocksolutions.com/dklar/kerberos.html">Setting up MIT Kerberos 5</a></p></li> 90*7f2fe78bSCy Schubert<li><p>Solaris: <a class="reference external" href="https://docs.oracle.com/cd/E19253-01/816-4557/6maosrjv2/index.html">Configuring the Kerberos Service</a></p></li> 91*7f2fe78bSCy Schubert</ol> 92*7f2fe78bSCy Schubert</section> 93*7f2fe78bSCy Schubert</section> 94*7f2fe78bSCy Schubert 95*7f2fe78bSCy Schubert 96*7f2fe78bSCy Schubert <div class="clearer"></div> 97*7f2fe78bSCy Schubert </div> 98*7f2fe78bSCy Schubert </div> 99*7f2fe78bSCy Schubert </div> 100*7f2fe78bSCy Schubert </div> 101*7f2fe78bSCy Schubert <div class="sidebar"> 102*7f2fe78bSCy Schubert 103*7f2fe78bSCy Schubert <h2>On this page</h2> 104*7f2fe78bSCy Schubert <ul> 105*7f2fe78bSCy Schubert<li><a class="reference internal" href="#">Installation guide</a><ul> 106*7f2fe78bSCy Schubert<li><a class="reference internal" href="#contents">Contents</a></li> 107*7f2fe78bSCy Schubert<li><a class="reference internal" href="#additional-references">Additional references</a></li> 108*7f2fe78bSCy Schubert</ul> 109*7f2fe78bSCy Schubert</li> 110*7f2fe78bSCy Schubert</ul> 111*7f2fe78bSCy Schubert 112*7f2fe78bSCy Schubert <br/> 113*7f2fe78bSCy Schubert <h2>Table of contents</h2> 114*7f2fe78bSCy Schubert <ul class="current"> 115*7f2fe78bSCy Schubert<li class="toctree-l1"><a class="reference internal" href="../user/index.html">For users</a></li> 116*7f2fe78bSCy Schubert<li class="toctree-l1 current"><a class="reference internal" href="index.html">For administrators</a><ul class="current"> 117*7f2fe78bSCy Schubert<li class="toctree-l2 current"><a class="current reference internal" href="#">Installation guide</a><ul> 118*7f2fe78bSCy Schubert<li class="toctree-l3"><a class="reference internal" href="install_kdc.html">Installing KDCs</a></li> 119*7f2fe78bSCy Schubert<li class="toctree-l3"><a class="reference internal" href="install_clients.html">Installing and configuring UNIX client machines</a></li> 120*7f2fe78bSCy Schubert<li class="toctree-l3"><a class="reference internal" href="install_appl_srv.html">UNIX Application Servers</a></li> 121*7f2fe78bSCy Schubert</ul> 122*7f2fe78bSCy Schubert</li> 123*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="conf_files/index.html">Configuration Files</a></li> 124*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="realm_config.html">Realm configuration decisions</a></li> 125*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="database.html">Database administration</a></li> 126*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="dbtypes.html">Database types</a></li> 127*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="lockout.html">Account lockout</a></li> 128*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li> 129*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="appl_servers.html">Application servers</a></li> 130*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="host_config.html">Host configuration</a></li> 131*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="backup_host.html">Backups of secure hosts</a></li> 132*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="pkinit.html">PKINIT configuration</a></li> 133*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="otp.html">OTP Preauthentication</a></li> 134*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="spake.html">SPAKE Preauthentication</a></li> 135*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="dictionary.html">Addressing dictionary attack risks</a></li> 136*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="princ_dns.html">Principal names and DNS</a></li> 137*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="enctypes.html">Encryption types</a></li> 138*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="https.html">HTTPS proxy configuration</a></li> 139*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="auth_indicator.html">Authentication indicators</a></li> 140*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="admin_commands/index.html">Administration programs</a></li> 141*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="../mitK5defaults.html">MIT Kerberos defaults</a></li> 142*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="env_variables.html">Environment variables</a></li> 143*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="troubleshoot.html">Troubleshooting</a></li> 144*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="advanced/index.html">Advanced topics</a></li> 145*7f2fe78bSCy Schubert<li class="toctree-l2"><a class="reference internal" href="various_envs.html">Various links</a></li> 146*7f2fe78bSCy Schubert</ul> 147*7f2fe78bSCy Schubert</li> 148*7f2fe78bSCy Schubert<li class="toctree-l1"><a class="reference internal" href="../appdev/index.html">For application developers</a></li> 149*7f2fe78bSCy Schubert<li class="toctree-l1"><a class="reference internal" href="../plugindev/index.html">For plugin module developers</a></li> 150*7f2fe78bSCy Schubert<li class="toctree-l1"><a class="reference internal" href="../build/index.html">Building Kerberos V5</a></li> 151*7f2fe78bSCy Schubert<li class="toctree-l1"><a class="reference internal" href="../basic/index.html">Kerberos V5 concepts</a></li> 152*7f2fe78bSCy Schubert<li class="toctree-l1"><a class="reference internal" href="../formats/index.html">Protocols and file formats</a></li> 153*7f2fe78bSCy Schubert<li class="toctree-l1"><a class="reference internal" href="../mitK5features.html">MIT Kerberos features</a></li> 154*7f2fe78bSCy Schubert<li class="toctree-l1"><a class="reference internal" href="../build_this.html">How to build this documentation from the source</a></li> 155*7f2fe78bSCy Schubert<li class="toctree-l1"><a class="reference internal" href="../about.html">Contributing to the MIT Kerberos Documentation</a></li> 156*7f2fe78bSCy Schubert<li class="toctree-l1"><a class="reference internal" href="../resources.html">Resources</a></li> 157*7f2fe78bSCy Schubert</ul> 158*7f2fe78bSCy Schubert 159*7f2fe78bSCy Schubert <br/> 160*7f2fe78bSCy Schubert <h4><a href="../index.html">Full Table of Contents</a></h4> 161*7f2fe78bSCy Schubert <h4>Search</h4> 162*7f2fe78bSCy Schubert <form class="search" action="../search.html" method="get"> 163*7f2fe78bSCy Schubert <input type="text" name="q" size="18" /> 164*7f2fe78bSCy Schubert <input type="submit" value="Go" /> 165*7f2fe78bSCy Schubert <input type="hidden" name="check_keywords" value="yes" /> 166*7f2fe78bSCy Schubert <input type="hidden" name="area" value="default" /> 167*7f2fe78bSCy Schubert </form> 168*7f2fe78bSCy Schubert 169*7f2fe78bSCy Schubert </div> 170*7f2fe78bSCy Schubert <div class="clearer"></div> 171*7f2fe78bSCy Schubert </div> 172*7f2fe78bSCy Schubert </div> 173*7f2fe78bSCy Schubert 174*7f2fe78bSCy Schubert <div class="footer-wrapper"> 175*7f2fe78bSCy Schubert <div class="footer" > 176*7f2fe78bSCy Schubert <div class="right" ><i>Release: 1.21.3</i><br /> 177*7f2fe78bSCy Schubert © <a href="../copyright.html">Copyright</a> 1985-2024, MIT. 178*7f2fe78bSCy Schubert </div> 179*7f2fe78bSCy Schubert <div class="left"> 180*7f2fe78bSCy Schubert 181*7f2fe78bSCy Schubert <a href="../index.html" title="Full Table of Contents" 182*7f2fe78bSCy Schubert >Contents</a> | 183*7f2fe78bSCy Schubert <a href="index.html" title="For administrators" 184*7f2fe78bSCy Schubert >previous</a> | 185*7f2fe78bSCy Schubert <a href="install_kdc.html" title="Installing KDCs" 186*7f2fe78bSCy Schubert >next</a> | 187*7f2fe78bSCy Schubert <a href="../genindex.html" title="General Index" 188*7f2fe78bSCy Schubert >index</a> | 189*7f2fe78bSCy Schubert <a href="../search.html" title="Enter search criteria" 190*7f2fe78bSCy Schubert >Search</a> | 191*7f2fe78bSCy Schubert <a href="mailto:krb5-bugs@mit.edu?subject=Documentation__Installation guide">feedback</a> 192*7f2fe78bSCy Schubert </div> 193*7f2fe78bSCy Schubert </div> 194*7f2fe78bSCy Schubert </div> 195*7f2fe78bSCy Schubert 196*7f2fe78bSCy Schubert </body> 197*7f2fe78bSCy Schubert</html>