Create realm trust principal on the i5/OS PASE Kerberos server

The stage needs to be set just so.
  1. In a character-based interface, type call QP2TERM. This command opens an interactive shell environment that allows you to work with i5/OS™ PASE applications.
  2. At the command line, enter export PATH=$PATH:/usr/krb5/sbin. This command points to the Kerberos scripts that are necessary to run the executable files.
  3. At the command line, enter kadmin -p admin/admin, and press Enter.
  4. Sign in with administrator's password. For example, secret.
  5. At the kadmin prompt, enter addprinc krbtgt/SHIPDEPT.MYCO.COM@ORDEPT.MYCO.COM. You will be prompted to enter a password for the principal "krbtgt/SHIPDEPT.MYCO.COM@ORDEPT.MYCO.COM". Enter shipord1 for the password. Press Enter. You will be prompted to re-enter this password, and you will receive a message that reads:
    Principal "krbtgt/SHIPDEPT.MYCO.COM@ORDEPT.MYCO.COM" created.
  6. At the kadmin prompt, enter addprinc krbtgt/ORDEPT.MYCO.COM@SHIPDEPT.MYCO.COM. You will be prompted to enter a password for the principal "krbtgt/ORDEPT.MYCO.COM@SHIPDEPT.MYCO.COM". Enter shipord2 for the password. Press Enter. You will be prompted to re-enter this password, and you will receive a message that reads:
    Principal "krbtgt/ORDEPT.MYCO.COM@SHIPDEPT.MYCO.COM" created.
  7. Enter quit to exit the kadmin interface, and press F3 (Exit) to exit the PASE environment.
Parent topic: Scenario: Set up cross realm trust
Previous topic: Ensure that the Kerberos server in i5/OS PASE on iSeries B has started
Next topic: Change encryption values on i5/OS PASE Kerberos server