Connector Guides › Connectors Guide › Host Access Management Connectors › Kerberos Connector › Connector-Specific Features › KRB Account Property Sheet › Account Properties Tab

Account Properties Tab

Use this tab to view and modify the account properties of a principal and account template.

The fields in this tab are listed below:

• Password

  Specifies the password of the Kerberos principal.

  Size/Type: 0 to 64 alpha-numeric characters

  Rule String: %p%

• Choose Random Password Check Box

  When checked, specifies that the password of the principal is randomly generated. The generated password conforms to the selected password account template.

• enc:salt Button

  Displays the Encryption Type and Salt Pairs dialog where you can view or edit the encryption types and key salt pairs.

  Note: If there is no password change, the dialog is read-only. If the password is changed or Choose Random Password is selected, the dialog is enabled and can be edited.

• Maximum Ticket Life

  Specifies the maximum ticket life of the Kerberos principal in days, hours minutes and seconds.

• Maximum Renewable Life of a Ticket

  Specifies the maximum renewable life of a ticket for the Kerberos principal in days, hours, minutes and seconds.

• Password Account Template

  Specifies the password account template that is assigned to the principal.

  Size/Type: up to 128 alpha-numeric characters

• Expiration Date Time: User

  Specifies the expiration date of the principal.

• Expiration Date Time: Password

  Specifies the expiration date of the principal's password.

• ALLOW POST DATED Check Box

  When checked, specifies that the principal is can receive post-dated tickets.

• ALLOW PROXIABLE

  When checked, specifies that the principal can receive proxiable tickets.

• REQUIRES HWAUTH

  When checked, specifies that the principal must pre-authenticate using a hardware device before being allowed to kinit.

• ALLOW TIX

  When checked, specifies that the principal can be issued tickets.

• ALLOW FORWARDABLE

  When checked, specifies that the principal can receive forwardable tickets.

• ALLOW DUP SKEY

  When checked, specifies that the principal can receive a session key for another user.

• ALLOW SVR

  When checked, specifies service tickets can be issued to this principal.

• NEED PWD CHANGE

  When checked, specifies that a flag is set to force a password change.

• ALLOW RENEWABLE

  When checked, specifies that the principal is not prohibited from obtaining renewable tickets.

• REQUIRES PREAUTH

  When checked, specifies that the principal must pre-authenticate before being allowed to kinit.

• ALLOW TGS REQ

  When checked, specifies that a Ticket-Granting Service request for a service ticket is permitted for this principal.

• PWD CHANGE SERVICE

  When checked, specifies that a flag is set to mark this principal as a password change service.