Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revisionLast revisionBoth sides next revision | ||
| 72:setup_directory [2020/03/04 11:36] – [Setup Active Directory] twn | 72:setup_directory [2020/03/04 11:43] – [Setup Active Directory] twn | ||
|---|---|---|---|
| Line 15: | Line 15: | ||
| </ | </ | ||
| + | |||
| + | Note: The KERBEROS-REALM needs to be specified in upper case. The whole principal must exactly match the principal specified in the <font inherit/ | ||
| Now you have to securely transfer the keytab file to the Stages server. | Now you have to securely transfer the keytab file to the Stages server. | ||
| - | ==== Enable delegation | + | === Enable delegation === |
| After exporting the keytab file, delegation has to be enabled on the trust account. Be aware that this can only be done after exporting the Kerberos key! Windows will not display this option, unless you have exported the key first. Select your trust account with the right mouse button and choose “Properties” from the context menu, click on the “Delegation” tab and check “Trust this user for delegation to any service (Kerberos only)”. | After exporting the keytab file, delegation has to be enabled on the trust account. Be aware that this can only be done after exporting the Kerberos key! Windows will not display this option, unless you have exported the key first. Select your trust account with the right mouse button and choose “Properties” from the context menu, click on the “Delegation” tab and check “Trust this user for delegation to any service (Kerberos only)”. | ||
| - | ==== To use a more secure encryption for the keytab file ==== | + | === To use a more secure encryption for the keytab file === |
| Execute the ktpass command as above but with e.g. -crypto AES256-SHA1.\\ | Execute the ktpass command as above but with e.g. -crypto AES256-SHA1.\\ | ||