HP UX Kerberos Data Security Software Using Groups to Control Settings, Editing the Default Group

Administering the Kerberos Server

Using Groups to Control Settings

		Using Groups to Control Settings
		You can modify the default values used for new principals using the
		Principal Information window (Figure 8-2). Each realm has a default
		group, and the default group for the realm contains default values.
		The values that you specify for the default group are inherited by all new
		principals in that realm. A default group is similar to a template that
		controls the settings for a new principal. This template is called
		default@REALM. When a new realm is created, this template is
		automatically added to the principal database.
		While adding or editing a single principal, you can elect to override the
		default values of the group. If the default values set during installation
		are not what you commonly use for new principals, edit the default group
		for the realm. When you edit the template settings, settings for the
		previously created principals are not changed.
		Editing the Default Group
		To edit the default group, complete the following steps:
Step	1.	In the HP Kerberos Administrator window, choose the Principals tab
		and select the realm of the principal.
Step	2.	Click New to open the Principal Information window as shown in
		Figure 8-2.
Step	3.	Choose Principal Information>Edit, and select the Edit Defaults
		Group option to display the Group Information window (Figure 8-10).
Step	4.	In the Group Information window, set the new default values in the
		General tab, the Password tab, and the Attributes tab. The fields in these
		tabs are identical to the fields in the corresponding Principal Information
		window tabs (Figure 8-2).
Step	5.	Click OK to close the Group Information window.
Step	6.	Click OK to close the Principal Information window.

182 Chapter 8