Indiana University
University Information Technology Services
  
What are archived documents?
Login>>
Login

Login is for authorized groups (e.g., UITS, OVPIT, and TCC) that need access to specialized Knowledge Base documents. Otherwise, simply use the Knowledge Base without logging in.

Close

At IU, how do I set up a Unix computer as a Kerberized application server?

In Kerberos, an application server is a server that supports Kerberized access via several common Internet protocols, such as telnet or rlogin. With a Kerberized client, you can connect to an application server securely; your password will not be passed over the network, and you can also encrypt your session.

Note: Because UITS does not recommend that novices attempt to set up an application server, this document assumes that you are comfortable with Unix. Also, these instructions are for Kerberos 5 only.

To set up a Unix computer as a Kerberized application server at Indiana University:

  1. Download the latest version of Kerberos, available from MIT. Click the link for the latest Kerberos release, and then read the instructions on how to retrieve the Kerberos source.

  2. The source will be packaged in a tar archive. Enclosed in this file will be the Kerberos distribution and its PGP signature. The distribution will be a tar archive compressed with GNU Zip.

  3. Decompress and unpack the distribution files. This will create a directory called krb5-[version], where [version] is the patch level of the distribution (e.g., 1.2.5).

  4. To view instructions on how to install Kerberos, go to the doc directory (located in the top-level distribution directory). The installation guide is available in several formats, including HTML and PostScript.

    When you get to the ./configure step, use the --without-krb4 option to disable building Kerberos 4 compatibility code. At IU, this code is useless, and previously contained security vulnerabilities. Your command line should look like this:

    ./configure --without-krb4
  5. Create both a /etc/krb5.conf file and a /etc/krb5.keytab file (download a working copy of the /etc/krb5.conf file from SharePoint).

    To request a keytab file:

    • If you are an LSP, complete the Support Request web form. This form is only accessible to LSPs and will have an option to request a Kerberos keytab.
    • If you are not an LSP, work with your LSP or contact your campus Support Center.

  6. To set up application services, read the installation guide. The two files you will likely need to edit are /etc/services and /etc/inetd.conf. For information about how the Kerberized clients included with the distribution work, see the user guide, which is available in the same directory as the installation guide.

At Indiana University, for personal or departmental Linux or Unix systems support, see At IU, how do I get support for Linux or Unix?

This is document ahkb in domain all.
Last modified on June 05, 2012.

I need help with a computing problem

  • Fill out this form to submit your issue to the UITS Support Center.
  • Please note that you must be affiliated with Indiana University to receive support.
  • All fields are required.



Please provide your IU email address. If you currently have a problem receiving email at your IU account, enter an alternate email address.

I have a comment for the Knowledge Base

  • Fill out this form to submit your comment to the IU Knowledge Base.
  • If you are affiliated with Indiana University and need help with a computing problem, please use the I need help with a computing problem section above, or contact your campus Support Center.