Create a Kerberos configuration file Step 2 of Setting up Kerberos as the authentication mechanism for WebSphere Application Server

Create a Kerberos configuration file

Create a Kerberos service principal name and keytab file
Parent
Set up Kerberos as the authentication mechanism for WebSphere Application Server

The IBM implementation of the Java Generic Security Service (JGSS) and KRB5 require a Kerberos configuration file krb5.conf or krb5.ini on each node or JVM (JVM). In this release of WAS, this configuration file should be placed in the config/cells/<cell_name> directory so that all application servers can access this file. If we do not have a Kerberos configuration file, use a wsadmin command to create one. Read the Creating a Kerberos configuration article for more information.

What to do next
Configure Kerberos as the authentication mechanism for WebSphere Application Server using the administrative console

Subtopics

Create a Kerberos configuration file
The Kerberos configuration file contains client configuration information, including the locations of Key Distribution Centers (KDCs) for the realms of interest, defaults for the current Kerberos realm and mappings of host names onto Kerberos realms. Use the wsadmin utility to create a Kerberos configuration file for WebSphere Application Server.

Related tasks

Create a Kerberos configuration file