Administration

 

 

 

kadmin Vs kadminl

Table 6-3

 

Administration Tools

 

 

 

 

 

 

 

Tool Name

Tool Description

 

 

 

 

 

 

Local Administrator

The graphical interface that runs on

 

 

(kadminl_ui)

the primary security server

 

 

 

 

 

 

Local

The command line tools that runs on

 

 

Command-Line-Administra

the primary security server

 

 

tor (kadminl)

 

 

 

 

 

 

 

Remote Administrator

The graphical user interface that can

 

 

(kadmin_ui)

only be run by administrative

 

 

 

principals with the required

 

 

 

permissions. It runs on all secondary

 

 

 

security servers and any client system

 

 

 

where the tool was installed.

 

 

 

 

 

 

Remote

The command line tool that can only be

 

 

Command-Line-Administra

run by administrative principals with

 

 

tor (kadmin)

the required permissions. It runs on all

 

 

 

secondary servers and any client

 

 

 

system where the tool was installed.

 

 

 

 

 

 

The Command-Line-Administrator has limited capabilities. It cannot be

NOTE

 

 

 

used to control: administrative permissions; maximum ticket lifetimes

 

 

and renew times or adding new realms. Hence, we recommend that the

 

 

Graphical user Interface be used for all administrative purposes.

 

 

 

 

Chapter 6

113