Connector Guides › Connectors Guide › Connecting to Endpoints › Kerberos Connector › Connector-Specific Features › How You Acquire and Manage Kerberos Endpoints Using the Provisioning Manager

How You Acquire and Manage Kerberos Endpoints Using the Provisioning Manager

You must acquire the Kerberos endpoint before you can administer it with the Provisioning Manager. When acquiring a Kerberos endpoint, perform the following steps from the Endpoint task view:

1. Acquire the machine as an endpoint in the Provisioning Manager.

   Note: There are two ways to authenticate to the endpoint: use a keytab or use a principal and a password. To specify the authentication method, complete the fields on the on the Properties Tab on the KRB Endpoint Property Sheet.

2. Explore the objects that exist in the endpoint.

   After registering the machine in the Provisioning Manager, you can explore its contents. The exploration process finds all Kerberos objects. You can correlate the principals with global users at this time, or you can wait to correlate them.

3. Correlate the explored principals to global users. You can choose to:
   • Use existing global users. Do this when there are already global users in the Provisioning Manager and you want to connect the existing global users to the Kerberos principals.
   • Create global users as needed. Do this when there are no global users and you want to populate the Provisioning Manager from the Kerberos principals.

     When you correlate principals, the Provisioning Manager creates or links the principals on an endpoint with global users, as follows:

   • The Provisioning Manager attempts to match the Kerberos principal name with each existing global user name. If a match is found, the Provisioning Manager associates the Kerberos principal with the global user. If a match is not found, the Provisioning Manager performs the next step.
   • The Provisioning Manager attempts to match the Kerberos principal name with each existing global user's full name. If a match is found, the Provisioning Manager associates the Kerberos principal with the global user. If a match is not found, The Provisioning Manager performs the next step.
   • The Provisioning Manager associates the Kerberos principal with the [default user] object or a new global user is created depending on your choice.

More Information:

Acquire a New Endpoint

Explore and Correlate Principals

View All Principals