Configure Windows 2000 and Windows XP workstations

Configure your client workstations by setting the Kerberos realm and the Kerberos server.

After you have created a host principal for your Windows® 2000 workstation on the Kerberos server in i5/OS™ PASE, you need to configure the client workstations. You need to make this client part of a workgroup by setting the Kerberos realm and Kerberos server on the workstation. You also need to set a password that will be associated with the workstation. To configure the workstations, complete these steps:
Note: User names, host names, and passwords are used for example purposes only.
  1. From a command prompt on the Windows 2000 workstation, enter:
    C:> ksetup /setdomain REALM.NAME.COM
    C:> ksetup /addkdc REALM.NAME.COM kdc1.hostname.com
    For example, the administrator for MyCo, Inc entered the following:
    C:> ksetup /setdomain MYCO.COM
    C:> ksetup /addkdc MYCO.COM kdc1.myco.com
  2. Set the local machine account password by entering this at the Windows 2000 workstation command prompt:
    C:> ksetup /setmachpassword password
    This password must match the password used when you created the host principal, pc1.myco.com. For example, the user for MyCo, Inc entered the following:
    C:> ksetup /setmachpassword secret1
  3. Map the Kerberos user to a local user by entering this at the Windows 2000 workstation command prompt:
    C:> ksetup /mapuser jonesm@MYCO.COM maryjones
  4. Restart the computer for the changes to take effect.
Optionally, you can configure a secondary Kerberos server that you can use as a backup server if your primary Kerberos server goes down or if it is too busy to handle requests. See Configure secondary Kerberos server for detailed instructions.