Configuring Windows 2000 and Windows XP workstations

 

To configure your client workstations, set the Kerberos realm and the Kerberos server.

After you have created a host principal for your Windows 2000 workstation on the Kerberos server in i5/OS® PASE, you need to configure the client workstations. You need to make this client part of a workgroup by setting the Kerberos realm and Kerberos server on the workstation. You also need to set a password that will be associated with the workstation. To configure the workstations, complete these steps:

User names, host names, and passwords are used for example purposes only.

  1. From a command prompt on the Windows 2000 workstation, enter: 
    C:> ksetup /setdomain REALM.NAME.COM C:> ksetup /addkdc REALM.NAME.COM kdc1.hostname.com
    For example, the administrator for MyCo, Inc entered the following: 
    C:> ksetup /setdomain MYCO.COM C:> ksetup /addkdc MYCO.COM kdc1.myco.com

  2. Set the local machine account password by entering this at the Windows 2000 workstation command prompt: 
    C:> ksetup /setmachpassword password
    This password must match the password used when you created the host principal, pc1.myco.com. For example, the user for MyCo, Inc entered the following: 
    C:> ksetup /setmachpassword secret1

  3. Map the Kerberos user to a local user by entering this at the Windows 2000 workstation command prompt: 
    C:> ksetup /mapuser jonesm@MYCO.COM maryjones

  4. Restart the computer for the changes to take effect.
Optionally, you can configure a secondary Kerberos server that you can use as a backup server if your primary Kerberos server goes down or if it is too busy to handle requests. See Configuring a secondary Kerberos server for detailed instructions.

 

Parent topic:

Configuring a Kerberos server in i5/OS PASE
Previous topic: Creating host, user, and service principals
Next topic: Configuring a secondary Kerberos server