Create a Kerberos configuration file

Create a Kerberos service principal (SPN) and keytab file on the Microsoft domain controller machine

Step Parent: Create a single sign-on for HTTP requests using SPNEGO Web authentication

The IBM implementation of the Java Generic Security Service (JGSS) and KRB5 require a Kerberos configuration file (krb5.conf or krb5.ini) on each node or JVM. In this release of WAS, this configuration file should be placed in the config/cells/cell directory so that all application servers can access this file. If we do not have a Kerberos configuration file, use a wsadmin command to create one. Read the Creating a Kerberos configuration article for more information.

What to do next

Configure and enable SPNEGO web authentication using the administrative console on the WAS machine

Subtopics

• Create a Kerberos configuration file
  The Kerberos configuration file contains client configuration information, including the locations of Key Distribution Centers (KDCs) for the realms of interest, defaults for the current Kerberos realm and mappings of host names onto Kerberos realms. Use the wsadmin utility to create a Kerberos configuration file for WebSphere Application Server.

Related tasks

Create a Kerberos configuration file