ibm-information-center/dist/eclipse/plugins/i5OS.ic.rzahq_5.4.0.1/rzahqenableqntcaccess.htm

59 lines
3.7 KiB
HTML

<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en-US" xml:lang="en-us">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="dc.language" scheme="rfc1766" content="en-us" />
<!-- All rights reserved. Licensed Materials Property of IBM -->
<!-- US Government Users Restricted Rights -->
<!-- Use, duplication or disclosure restricted by -->
<!-- GSA ADP Schedule Contract with IBM Corp. -->
<meta name="dc.date" scheme="iso8601" content="2005-09-13" />
<meta name="copyright" content="(C) Copyright IBM Corporation 1998, 2006" />
<meta name="security" content="public" />
<meta name="Robots" content="index,follow"/>
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
<title>Enabling Kerberos with a Windows Server 2003 Active Directory Server</title>
<link rel="stylesheet" type="text/css" href="ibmidwb.css" />
<link rel="stylesheet" type="text/css" href="ic.css" />
</head>
<body>
<a id="Top_Of_Page" name="Top_Of_Page"></a><!-- Java sync-link -->
<script language = "Javascript" src = "../rzahg/synch.js" type="text/javascript"></script>
<img src="delta.gif" alt="Start of change" />
<a name="rzahqenableqntcaccess"></a>
<h3 id="rzahqenableqntcaccess">Enabling Kerberos with a Windows Server 2003 Active Directory Server</h3>
<p><img src="delta.gif" alt="Start of change" /> QNTC, SBMNWSCMD, and File Level Backup can use Kerberos to
authenticate to Windows Active Domain member servers. You may need to install
an update Windows Server 2003 on your Microsoft&reg; Active Directory controller
servers in order to use Kerberos. This update is available in Service Pack
1 or Microsoft hot fix KB833708. Additional information,
including information about installing the service pack or the hot fix, is
available on the <a href="http://www.microsoft.com/">Microsoft Web site</a>
<img src="www.gif" alt="Link outside the Information Center" /><img src="deltaend.gif" alt="End of change" /></p>
<p><img src="delta.gif" alt="Start of change" />After you install the hot fix or service pack 1, you must also
update the Windows Server 2003 registry. Do the following steps:<img src="deltaend.gif" alt="End of change" /></p>
<ol type="1"><img src="delta.gif" alt="Start of change" />
<li>Click <span class="bold">Start</span>><span class="bold">Run</span></li>
<li>Type <tt>regedit</tt> in the <span class="bold">Open</span> box.</li>
<li>Click <span class="bold">OK</span>.</li>
<li>Select the <span class="bold">HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Kdc</span> registry subkey.</li>
<li>Right-click <span class="bold">Kdc</span>.</li>
<li>Select <span class="bold">New</span> .</li>
<li>Click <span class="bold">DWORD Value</span>.</li>
<li>Enter <tt>KdcUseRequestedEtypesForTickets</tt> as the
New Value.</li>
<li>Right-click <span class="bold">KdcUseRequestedEtypesForTickets</span>.</li>
<li>Select <span class="bold">Modify</span>.</li>
<li>Set the <span class="bold">KdcUseRequestedEtypesForTickets</span> registry
value to 1.</li>
<li>Click <span class="bold">OK</span>.</li>
<li>Quit Registry Editor.</li>
<li>To activate the change, restart the Key Distribution Center service or
reboot the server.</li><img src="deltaend.gif" alt="End of change" /></ol><img src="deltaend.gif" alt="End of change" />
<a id="Bot_Of_Page" name="Bot_Of_Page"></a>
</body>
</html>