Administration

Using Groups to Control Settings

 

 

Using Groups to Control Settings

 

 

You can modify the default values used for new principals in the

 

 

Principal Information window. These default values are stored in a

 

 

default group for the realm. Each realm has one default group.

 

 

The values you specify for the default group are inherited by all new

 

 

principals in that realm. A default group is similar to a template, that

 

 

controls the settings for a new principal. This template is called

 

 

default@REALM. It is automatically added to the principal database

 

 

when a new realm is created.

 

 

When adding or editing a single principal, you may elect to override the

 

 

group’s default values. If the defaults set during installation are not

 

 

what you commonly use for new principals, then edit the default group

 

 

for the realm. Note that the settings for the previously created principals

 

 

are not changed by editing the settings for the template.

 

 

To edit the default group

Step

1.

In the kadminl_ui window, choose the Principals tab and select the

 

 

realm.

Step

2.

Click New to open the Principal Information window.

Step

3.

From the Edit menu, choose Edit Defaults Group. The Group

 

 

Information window appears.

Step

4.

Set the new default values in the General tab, the Password tab and the

 

 

Attributes tab. The fields contained in these tabs are identical to the

 

 

fields in the corresponding Principal Information tabs.

Step

5.

Close the Group Information window by clicking OK.

Step

6.

Close the Principal Information window by clicking Cancel.

 

 

You can also edit the default group by selecting the default@REALM

 

 

principal from the List of Principals on the Principals tab. Click

 

 

Edit to open the Principal Information window, and then enter the

 

 

information on the various tabs.

Chapter 6

155