Configuration

The dce_config utility has been enhanced to facilitate the interoperability of Kerberos V5 clients with a DCE Security server. The additions allow Kerberos V5 clients to interoperate with a DCE KDC without any further configuration steps. When a host is configured as a DCE Security server or client, the following steps are performed for Kerberos V5 interoperability:

1. Service entries for the secure remote utilities are added to the /etc/services file (klogin, kshell, ekshell, eklogin).

2. Entries for the secure remote utilities are added to the /etc/inetd.conf file. The inetd command is then restarted to read the new entries.

3. The host principal key and account required by the secure remote utilities are created.

4. The /krb5/krb.realms file, which describes where to find the KDC, is created and the default realm is added.

5. The /etc/krb5.conf file, which contains necessary configuration information, is created.

6. The /etc/v5srvtab file, which is the default keytab used by Kerberos V5 clients, is linked to the /krb5/srvtab file, which is the default keytab used by DCE clients.