Commands Reference, Volume 3

mkkrb5srv Command

Syntax

mkkrb5srv -h | [ -r Realm [ -s Server ] [ -v VDBPath ] -d Domain -a AdminName ]

The mkkrb5srv command configures the Kerberos server. This command creates the kadm5.acl file, the kdc.conf file, and the Kerberos database. It also adds the administrator to the database and updates the /etc/inittab file with Kerberos daemons. This command does the initial configuration once the variables are set. They can be modified by editing the following files:

/etc/krb5/krb5.conf:	Values for realm name, Kerberos admin server, and domain name are set as specified on the command line. Also updates the paths for default_keytab_name, kdc, and kadmin log files.
/var/krb5/krb5kdc/kdc.conf	This command sets the value for kdc_ports. Paths for database name, admin_keytab, acl_file, dict_file, key_stash_file. Values for kadmin_port, max_life, max_renewable_life, master_key_type, and supported_enctypes.
/var/krb5/krb5kdc/kadm5.acl	Sets up the acls for admin, root, and host principals.

If DCE is not configured, this command creates a link to /etc/krb5/krb5.conf from /etc/krb5.conf.

Standard Output	Consists of information messages when the -h flag is used.
Standard Error	Consists of error messages when the command cannot complete successfully.

Flags

-a AdminName	Specifies the Kerberos Principal name for the administrator.
-d Domain	Specifies the domain name for the Kerberos realm.
-h	Specifies that the command is only to display the valid command syntax.
-r Realm	Specifies the realm for which the Kerberos server is to be configured.
-s Server	Specifies the fully qualified name of Kerberos Admin Server.
-v VDBPath	Specifies the path where the Kerberos VDB layer is located.

Exit Status

Failure of this command to execute successfully results in incomplete server configuration.

0	Indicates the successful completion of the command.
1	Indicates that an error occurred.

Security

Only the root user is authorized to use this command.

Examples

To display the command syntax, type:
```
mkkrb5srv -h
```

To configure sundial as a Kerberos server, type:

mkkrb5srv -r UD3A.AUSTIN.IBM.COM -s sundial.austin.ibm.com -d austin.ibm.com

Files

/usr/sbin/mkkrb5srv

Contains the mkkrb5srv command.