WebSEAL Kerberos configuration

Complete the Kerberos configuration on the appliance so that single sign-on with Kerberos constrained delegation can work.

Steps

1. Select Web > Global Settings > Kerberos Configuration.

2. On the Realms tab, select New > Realm.

3. Enter the AD domain name. For example, <DOMAIN>.

4. Click Save.

5. Select the new realm.

6. Click New > Property.

7. In the Create New Property window, select kdc.

8. Enter the AD KDC address in the Value field. The AD KDC address is the name of the domain controller. For example, <machine>.<domain>.

9. Click Save.

10. On the Defaults tab, change the default_realm to be the new realm that you just created.

11. On the Keyfiles tab, import the key table file that was generated for the WebSEAL user.

12. Deploy the changes.

13. Select System > Network Settings > Hosts File.

14. Add the AD domain and KDC addresses to the hosts file. This step is only necessary if the DNS is not configured.

15. Deploy the changes.

Parent topic: Single sign-on using Kerberos constrained delegation