[DIRSERVER-2072] Documentation For Kerberos Configuration Needs To Be Updated

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.0-M20
• Fix Version/s: 2.0.0-M24
• Component/s: doc
• Labels: documentation
• Flags: Important
• Assignee: Unassigned
• Reporter: Ed Brown
• Created: 09/Jun/15 15:30
• Updated: 20/Nov/16 21:48
• Resolved: 20/Nov/16 21:48

Description

I configured Directory Server LDAP and Kerberos as specified in the documentation, but could never get the user authenticated. After looking around the Internet, and initially ignoring the solution, I looked at the test code for Directory Server and saw the test code used the krb5.conf file in JAVA_HOME/jre/lib/security. After putting the information in the file, authentication worked.

It wasn't in the documentation

I used the following entries:

[libdefaults]
default_realm = EXAMPLE.COM

[realms]
EXAMPLE.COM =

{ kdc = localhost:6088 }

[domain_realm]
.example.com = EXAMPLE.COM
example.com = EXAMPLE.COM

[login]
krb4_convert = true
krb4_get_tickets = false