Connector Guides › Connectors Guide › Connecting to Endpoints › Kerberos Connector › Connector-Specific Features › KRB Account Property Sheet › Account Properties Tab

Account Properties Tab

Use this tab to view and modify the account properties of a principal and account template.

The fields in this tab are listed below:

Password

Specifies the password of the Kerberos principal.

Size/Type: 0 to 64 alpha-numeric characters

Rule String: %p%

Choose Random Password Check Box

When checked, specifies that the password of the principal is randomly generated. The generated password conforms to the selected password account template.

enc:salt Button

Displays the Encryption Type and Salt Pairs dialog where you can view or edit the encryption types and key salt pairs.

Note: If there is no password change, the dialog is read-only. If the password is changed or Choose Random Password is selected, the dialog is enabled and can be edited.

Maximum Ticket Life

Specifies the maximum ticket life of the Kerberos principal in days, hours minutes and seconds.

Maximum Renewable Life of a Ticket

Specifies the maximum renewable life of a ticket for the Kerberos principal in days, hours, minutes and seconds.

Password Account Template

Specifies the password account template that is assigned to the principal.

Size/Type: up to 128 alpha-numeric characters

Expiration Date Time: User

Specifies the expiration date of the principal.

Expiration Date Time: Password

Specifies the expiration date of the principal's password.

ALLOW POST DATED Check Box

When checked, specifies that the principal is can receive post-dated tickets.

ALLOW PROXIABLE

When checked, specifies that the principal can receive proxiable tickets.

REQUIRES HWAUTH

When checked, specifies that the principal must pre-authenticate using a hardware device before being allowed to kinit.

ALLOW TIX

When checked, specifies that the principal can be issued tickets.

ALLOW FORWARDABLE

When checked, specifies that the principal can receive forwardable tickets.

ALLOW DUP SKEY

When checked, specifies that the principal can receive a session key for another user.

ALLOW SVR

When checked, specifies service tickets can be issued to this principal.

NEED PWD CHANGE

When checked, specifies that a flag is set to force a password change.

ALLOW RENEWABLE

When checked, specifies that the principal is not prohibited from obtaining renewable tickets.

REQUIRES PREAUTH

When checked, specifies that the principal must pre-authenticate before being allowed to kinit.

ALLOW TGS REQ

When checked, specifies that a Ticket-Granting Service request for a service ticket is permitted for this principal.

PWD CHANGE SERVICE

When checked, specifies that a flag is set to mark this principal as a password change service.

More Information:

KRB Account Property Sheet

KRB Account Template Property Sheet