Previous Topic: Configure Policy Server

Next Topic: Configure Windows Workstation

Administration Guide › Configure SPS to Support Integrated Windows Authentication › Configure SPS to Support Integrated Windows Authentication › Kerberos Authentication Schemes › Configure Kerberos Authentication › Configure Web Server

Configure Web Server

Perform the following steps to configure a web server:

  1. Install a SiteMinder Web Agent with SiteMinder Kerberos Authentication Scheme support.
  2. Register a trusted host with the Policy Server and configure the Web Agent.
  3. Configure a Kerberos configuration file, krb5.ini, and perform the following steps:
    1. Configure KDC for the Kerberos realm (domain).
    2. Configure krb5.ini to use the keytab file containing the credentials of the web server principal.
    3. Place krb5.ini in the system root path on Windows and in /etc/krb5/ on UNIX.
  4. Deploy the keytab file created on KDC that contains the web server credentials to a secure location on the web server.

Important! If the web server is installed on Windows and KDC is deployed on UNIX, ensure that you perform additional configuration on the web server using the Ksetup utility.