Connector Guides › Connectors Guide › Host Access Management Connectors › Kerberos Connector › Connector-Specific Features › KRB Endpoint Property Sheet › Properties Tab

Properties Tab

Use this tab to enter the Kerberos Server and Realm and the credentials used for the connection.

The fields in this tab are listed below:

• Kerberos Server

  Specifies the host name or IP address of the server where the Kerberos Server is deployed.

  Size Type: 1 to 100 alphanumeric characters.

  This is a required field.

  Note: This host may be used by multiple KRB endpoints managing multiple Kerberos realms.

• Port

  Specifies the port number the server listens on. If this field is left blank, the default port is used. If not left blank, the number is passed to the kadmin command.

• Kerberos Realm

  Specifies the Kerberos realm to be managed.

  Size/Type: 1 to 100 alphanumeric characters.

  This is a required field.

  Note: The same naming rules that apply to principals also apply to Kerberos realms.

• Security controls

  Use these controls to specify the authentication method. When the Keytab option is selected, the Keytab and Principal fields are enabled. When the Principal option is selected, the Principal and Password fields are enabled.

  • Keytab

    Specifies the fully qualified keytab filename. If this field is left blank, the connector uses the default keytab. On Solaris the default keytab file is:

    /etc/krb5/krb5.keytab

  • Principal

    Specifies the principal to authenticate with. If you use the keytab option, the principal's encrypted password must be in the keytab file.

    If you use the keytab option and you leave this field blank, the host principal of the host where the Java CS is deployed, host/localhostname@REALM, will be used to authenticate using its key from the keytab. When the principal is specified, its key from the keytab will be used to authenticate.

    Note: If you use the keytab option and add a principal to a keytab file using the ktadd command of kadmin, its password will be randomized. So if the principal is being used for another KRB directory by specifying the password, that directory will not be operable since the password is not correct.

    This is a required field when using the password option.

    Size/Type: 1 to 128 alphanumeric characters.

    Note: The naming rules should follow principal naming rules.

  • Password

    Specifies the password for the principal.

• Explore Timeout

  Specifies the time that the Provisioning server waits for a response from the remote server before generating an error for the Explore and Correlate operation.

  Default Value: 3600 seconds or 1 hour