Administering the Kerberos Server

Local Administrator – kadminl_uiLocal Administrator – kadminl_ui

The local administrator, kadminl_ui, is the GUI-based database administrator that runs on the primary security server. It allows principals with administrative privileges to administer and maintain the principal database on an ongoing basis. You must include all the users, clients, or services authenticated by the Kerberos server as principals in the principal database.

You can use kadminl_ui to perform the following functions:

•Adding, modifying, listing, or deleting principals.

•Searching for principals.

•Listing administrative permissions.

•Extracting service principal keys to the key table files.

•Adding, modifying, listing, or deleting realms.

•Editing the default group.

Using kadminl_ui

This section provides an abridged summary on using the kadminl_ui. Execute the following at the HP-UX command prompt to invoke the HP Kerberos Administrator window:

# /opt/krb5/admin/kadminl_ui

The HP Kerberos Administrator window contains the following tabs:

•Principals

—Managing Principals

—Using Groups to Control Settings

—Setting Administrative Principals

•Realms

—Adding a Realm

—Deleting a Realm

134

Chapter 8