CA Identity Manager Connector Guides › Connectors Guide › Connecting to Endpoints › Kerberos Connector › Kerberos Installation and Deployment › Install and Deploy the Connector › When to Configure the Kerberos Connector to Use SSH

When to Configure the Kerberos Connector to Use SSH

From CA Identity Manager 12.5 SP7 onwards, the Kerberos connector uses SSH to execute the kadmin command remotely. Set up SSH permissions on the SSH server under any of the following scenarios:

• You are upgrading any version of CA Identity Manager to SP7 or later, you have existing KRB endpoints, and you move CA IAM Connector Server from Solaris to a Windows, Linux, or a Solaris host that is not a member of the realm.

  Note: We recommend that you upgrade the CA Identity Manager Provisioning Directory, Provisioning Server, Provisioning Manager and the CA Identity Manager User Console. When installing the new CA IAM Connector Server, register CA IAM Connector Server to the Provisioning Server during installation.

• You are creating a Kerberos endpoint

Note: Ensure that the SSH server is a member of the realm.