Administering the Kerberos Server

Administrative Permissions

 

 

the Add Principals, Delete Principals, Change Principal Password,

 

 

Inquire About Principals, Modify Principals, and Extract Keys

 

 

permissions.

 

 

Table 8-15describes the components of the Group Information window.

Table 8-15

Group Information Window Components

 

 

 

 

 

Component

 

Description

 

 

 

 

 

Principal

 

Displays the name of the principal that you are editing. You must

 

 

 

add an additional principal account with the /admin instance for

 

 

 

the individual requiring administrator privileges.

 

 

 

 

 

Add Principals

 

Allows the principal to add new principals to the principal

 

 

 

database.

 

 

 

 

 

Delete

 

Allows the principal to delete principals from the principal

 

Principals

 

database.

 

 

 

 

 

Modify

 

Modifies principals.

 

Principals

 

 

 

 

 

 

 

Inquire about

 

Inquires about specific prinicpals. You must enable this option for

 

Principals

 

all principals that access the Kerberos administrative utilities. If

 

 

 

you wish to log on to the HP Kerberos Administrator, select the

 

 

 

Permission for this principal in This Realm box>Inquire

 

 

 

about Principals attribute.

 

 

 

 

 

Extract Keys

 

Extracts a key into the service key table file.

 

 

 

 

 

Change

 

Changes principal passwords. In addition to the principals in

 

Principal

 

admin_acl_file, you can also change any principal in the

 

Password

 

principal database.

 

 

 

 

190

Chapter 8