skip book previous and next navigation links
go up to top of book: HP Open Source Security for OpenVMS Volume 3:... HP Open Source Security for OpenVMS Volume 3:...
go to beginning of chapter: Installation and Configuration Installation and Configuration
go to previous page: Downloading the Kit Downloading the Kit
go to next page: Installing and Configuring Kerberos on OpenVMS Alpha Version 7.3-2Installing and Configuring Kerberos on OpenVMS Alpha Version...
end of book navigation links

Installing and Configuring Kerberos on OpenVMS Version 8.2 and Higher 



Kerberos Version 2.1 is automatically installed during the installation of OpenVMS Version 8.2 or higher, or during an upgrade from a previous version of OpenVMS to Version 8.2 or higher.

If you have not previously configured an earlier version of Kerberos on your system, you must run the configuration program before starting Kerberos. Example 2-1 shows a configuration log.

Once you have a valid configuration, start Kerberos with the following command:

$ @SYS$STARTUP:KRB$STARTUP.COM
Example 1  Kerberos Configuration Log on OpenVMS 
  $ @SYS$STARTUP:KRB$CONFIGURE
      Kerberos V2.1 for OpenVMS Configuration Menu
 
      Configuration options:
 
             1  -  Setup Client configuration
             2  -  Edit Client configuration
 
             3  -  Setup Server configuration
             4  -  Edit Server configuration
 
             5  -  Shutdown Servers
             6  -  Startup Servers
 
             E  -  Exit configuration procedure
 
      Enter Option: 1
 
    Where will the OpenVMS Kerberos 5 KDC be running [ system ]:
    What is the OpenVMS Kerberos 5 default domain [ abc.xyz.com ]:
    What is the OpenVMS Kerberos 5 Realm name [ SYSTEM.ABC.XYZ.COM ]:
 
    Press Return to continue ...
 
      Kerberos V2.1 for OpenVMS Configuration Menu
 
      Configuration options:
 
             1  -  Setup Client configuration
             2  -  Edit Client configuration
 
             3  -  Setup Server configuration
             4  -  Edit Server configuration
 
             5  -  Shutdown Servers
             6  -  Startup Servers
 
             E  -  Exit configuration procedure
 
      Enter Option: 3
 
    Where will the OpenVMS Kerberos 5 KDC be running [ system ]:
    What is the OpenVMS Kerberos 5 default domain [ abc.xyz.com ]:
    What is the OpenVMS Kerberos 5 Realm name [ SYSTEM.ABC.XYZ.COM ]:
    The type of roles the KDC can perform are:
        NO_KDC     -- where the KDC will not be run
        SINGLE_KDC -- where the KDC is the only one in the realm
        MASTER_KDC -- where the KDC is the master of 1 or more other KDCs
        SLAVE_KDC  -- where the KDC is slave to another KDC
    What will be the KDC's role on this node [ SINGLE_KDC ]:
    Create the OpenVMS Kerberos 5 database [ Y ]:
 
    Creating OpenVMS Kerberos 5 database ...
    Initializing database 'krb$root:[krb5kdc]principal' for realm 
    'SYSTEM.ABC.XYZ.COM',
    master key name 'K/M@SYSTEM.ABC.XYZ.COM'
    You will be prompted for the database Master Password.
    It is important that you NOT FORGET this password.
 
    Enter KDC database master key:
    Re-enter KDC database master key to verify:
    Priority: info
    No dictionary file specified, continuing without one.
 
    Please enter a default OpenVMS Kerberos 5 administrator [ SYSTEM ]:
    Authenticating as principal SYSTEM/admin@SYSTEM.ABC.XYZ.COM with password.
 
    Enter password for principal "SYSTEM/admin@SYSTEM.ABC.XYZ.COM":
    Re-enter password for principal "SYSTEM/admin@SYSTEM.ABC.XYZ.COM":
    Principal "SYSTEM/admin@SYSTEM.ABC.XYZ.COM" created.
    Priority: info
    No dictionary file specified, continuing without one.
    WARNING: no policy specified for SYSTEM/admin@SYSTEM.ABC.XYZ.COM; defaulting to no policy
    Create OpenVMS Kerberos 5 principals [ Y ]: N
    Authenticating as principal SYSTEM/admin@SYSTEM.ABC.XYZ.COM with password.
    Priority: info
    No dictionary file specified, continuing without one.
    KADMIN_LOCAL: Entry for principal kadmin/admin with kvno 3, encryption type Triple
    DES cbc mode with HMAC/sha1 added to keytab WRFILE=KRB$ROOT:[KRB5KDC]KADM5.KEYTAB.
 
    KADMIN_LOCAL: Entry for principal kadmin/admin with kvno 3, encryption type DES
    cbc mode with CRC-32 added to keytab WRFILE=KRB$ROOT:[KRB5KDC]KADM5.KEYTAB.
 
    Authenticating as principal SYSTEM/admin@SYSTEM.ABC.XYZ.COM with password.
    Priority: info
    No dictionary file specified, continuing without one.
    KADMIN_LOCAL: Entry for principal kadmin/changepw with kvno 3, encryption type Triple
    DES cbc mode with HMAC/sha1 added to keytab WRFILE=KRB$ROOT:[KRB5KDC]KADM5.KEYTAB.
 
    KADMIN_LOCAL: Entry for principal kadmin/changepw with kvno 3, encryption type DES
    cbc mode with CRC-32 added to keytab WRFILE=KRB$ROOT:[KRB5KDC]KADM5.KEYTAB.
 
    Press Return to continue ...
 
      Kerberos V2.1 for OpenVMS Configuration Menu
 
      Configuration options:
 
             1  -  Setup Client configuration
             2  -  Edit Client configuration
 
             3  -  Setup Server configuration
             4  -  Edit Server configuration
 
             5  -  Shutdown Servers
             6  -  Startup Servers
 
             E  -  Exit configuration procedure
 
      Enter Option: 6
 
 
    Starting OpenVMS Kerberos Servers (Role: SINGLE_KDC)...
 
    Starting OpenVMS Kerberos server KRB$KRB5KDC ...
    %RUN-S-PROC_ID, identification of created process is 00000060
    Starting OpenVMS Kerberos server KRB$KADMIND ...
    %RUN-S-PROC_ID, identification of created process is 00000061
 
    Press Return to continue ...
 
      Kerberos V2.1 for OpenVMS Configuration Menu
 
      Configuration options:
 
             1  -  Setup Client configuration
             2  -  Edit Client configuration
 
             3  -  Setup Server configuration
             4  -  Edit Server configuration
 
             5  -  Shutdown Servers
             6  -  Startup Servers
 
             E  -  Exit configuration procedure
 
      Enter Option: E


go to previous page: Downloading the Kit Downloading the Kit
go to next page: Installing and Configuring Kerberos on OpenVMS Alpha Version 7.3-2Installing and Configuring Kerberos on OpenVMS Alpha Version...