Planning network authentication service

Many different Kerberos authentication solutions exist and can be used in your enterprise. This information focuses on planning an i5/OS^® implementation and considerations when you use network authentication service with a Kerberos server configured in Microsoft^® Windows^® Active Directory or i5/OS PASE.

For information about setting up a Kerberos server in Microsoft Windows Active Directory, see Windows 2000 Server.

The following IBM^® systems support Kerberos authentication. For information about platform-specific Kerberos implementation, see the following sources:

• System p™

  • IBM Network Authentication Service AIX^®, Linux^®, and Solaris Administrator's and User's Guide.

  • IBM Network Authentication Service AIX, Linux, and Solaris Application Development Reference.

    You can find this documentation in the AIX 5L™ Expansion Pack and Bonus Pack CD.

• System z™

  • z/OS^® Security Server Network Authentication Service Administration

Use these tasks to help you plan network authentication service.

1. Planning a Kerberos server
   Plan for a Kerberos server based on your operating system.
2. Planning realms
   Understanding your enterprise can help you plan for realms in your environment.
3. Planning principal names
   Principals are names of users or services in a Kerberos network. Principal names consist of the user name or service name and the name of the realm to which that user or service belongs.
4. Host name resolution considerations
   To ensure that Kerberos authentication and host name resolution work properly with your Kerberos-enabled applications, verify that your PCs and your System i platforms resolve the same host name for the system on which the service application resides.
5. Network authentication service planning work sheets
   To successfully configure network authentication service, understand the requirements and complete the necessary planning steps.

 

Parent topic:

Network authentication service