Configure your client workstations by setting the Kerberos realm
and the Kerberos server.
After you have
created
a host principal for your Windows
® 2000 workstation on the Kerberos
server in i5/OS™ PASE,
you need to configure the client workstations. You need to make this client
part of a workgroup by setting the Kerberos realm and Kerberos server on the
workstation. You also need to set a password that will be associated with
the workstation. To configure the workstations, complete these steps:
Note: User
names, host names, and passwords are used for example purposes only.
- From a command prompt on the Windows 2000 workstation, enter:
C:> ksetup /setdomain REALM.NAME.COM
C:> ksetup /addkdc REALM.NAME.COM kdc1.hostname.com
For example, the administrator for MyCo, Inc entered the following: C:> ksetup /setdomain MYCO.COM
C:> ksetup /addkdc MYCO.COM kdc1.myco.com
- Set the local machine account password by entering this at the Windows 2000
workstation command prompt:
C:> ksetup /setmachpassword password
This password must match the password used when you created the host
principal, pc1.myco.com. For example, the user for MyCo, Inc entered
the following: C:> ksetup /setmachpassword secret1
- Map the Kerberos user to a local user by entering this at the Windows 2000
workstation command prompt:
C:> ksetup /mapuser jonesm@MYCO.COM maryjones
- Restart the computer for the changes to take effect.
Optionally, you can configure a secondary Kerberos server that you
can use as a backup server if your primary Kerberos server goes down or if
it is too busy to handle requests. See
Configure secondary Kerberos server for
detailed instructions.