Connector Guides › Connectors Guide › Connecting to Endpoints › Kerberos Connector › Kerberos Installation and Deployment › Install and Deploy the Connector › When to Configure the Kerberos Connector to Use SSH

When to Configure the Kerberos Connector to Use SSH

From CA IdentityMinder 12.5 SP7 onwards, the Kerberos connector uses SSH to execute the kadmin command remotely. Set up SSH permissions on the SSH server under any of the following scenarios:

• You are upgrading any version of CA IdentityMinder to SP7 or later, you have existing KRB endpoints, and you move CA IAM CS from Solaris to a Windows, Linux, or a Solaris host that is not a member of the realm.

  Note: We recommend that you upgrade the CA IdentityMinder Provisioning Directory, Provisioning Server, Provisioning Manager and the CA IdentityMinder User Console. When installing the new CA IAM CS, register CA IAM CS to the Provisioning Server during installation.

• You are creating a Kerberos endpoint

Note: Ensure that the SSH server is a member of the realm.