Kerberos for HTTP Server

This topic provides information about Kerberos for use with your HTTP Server (powered by Apache).

Important: Information for this topic supports the latest PTF levels for HTTP Server for i5/OS . It is recommended that you install the latest PTFs to upgrade to the latest level of the HTTP Server for i5/OS. Some of the topics documented here are not available prior to this update. See http://www.ibm.com/servers/eserver/iseries/software/http/services/service.htm Link outside Information Center

for more information.

Kerberos is a network authentication protocol designed to provide authentication for client or server applications with secret-key cryptography. Kerberos is a ticket-based authentication system that provides an alternative to user and password or X.509 certificate authentication. With the HTTP Server (powered by Apache), you can use Kerberos on its own or in conjunction with Enterprise Identity Mapping (EIM) to authenticate Web users to the Web server.

For more information on EIM, see EIM concepts.

Kerberos requirements

Only supported on OS/400^® or i5/OS™ V5R2 or later.
Check your browser information to ensure it supports Kerberos. Not all browsers support Kerberos and some only support it in their more recent versions.

See the JKL Toy Company enables single signon for HTTP Server (powered by Apache) scenario for a complete step-by-step instructions on how to enable Kerberos for your iSeries™ server.