Date Posted:
Product: TIBCO Spotfire®
Product: TIBCO Spotfire®
Problem:
Configuring krb5.conf when setting up Kerberos authentication across multiple domains
Solution:
Description:
krb5.conf file contains Kerberos configuration information which includes KDC & admin servers for one or more Kerberos realms, default values for the current realm and mappings of hostnames onto Kerberos realms. If customers have multiple domains that users are part of, then the krb5.conf file should be updated accordingly. Information with various domains/domain realms for authentication to work will be part of this file.
Here is a quick overview about the information contained within the krb5.conf file.
libdefaults - Settings used by the Kerberos library
realms - Realm-specific contact information and settings
domain_realm - Maps server hostnames to Kerberos realms
capaths - Authentication paths for non-hierarchical cross-realm (E.g., domains across multiple Windows forests)
appdefaults - default settings used by some Kerberos applications
plugins - Controls plugin module registration
Within the Spotfire Server installation the krb5.conf file is located at <Spotfire Server install directory>\tibco\tss\<version>\jdk\jre\lib\security.
Comments
0 comments
Article is closed for comments.