Server Admin 10.5 Help
Joining a Server to a Kerberos Realm
Using Server Admin, a Kerberos administrator or a user whose account has the properly delegated authority can join Mac OS X Server to a Kerberos realm.
The server can join only one Kerberos realm. It can be an Open Directory Kerberos realm, an Active Directory Kerberos realm, or an existing realm based on MIT Kerberos.
To join an Open Directory Kerberos realm, you need a Kerberos administrator account or a user account with delegated Kerberos authority. For more information, see Delegating Authority to Join an Open Directory Kerberos Realm.
To join a server to a Kerberos realm:
- Make sure the server you want to join to the Kerberos realm is configured to access the shared directory domain of the Kerberos server.
To confirm, open Directory Utility on the server you want to join to the Kerberos realm or connect to the server using Directory Utility on another computer. Click Search Policy, then click Authentication and make sure the Kerberos server’s directory domain is listed. If it is not listed, browse Configuring Access to Directories for instructions.
- Open Server Admin and connect to the server you want to join to the Kerberos realm.
- Click the triangle to the left of the server.
The list of services appears.
- From the expanded Servers list, select Open Directory.
- Click Settings, then click General.
- Confirm that the Role is Connected to a Directory Server, then click Join Kerberos and enter the following information:
For an Open Directory Kerberos realm or an Active Directory Kerberos realm, choose the realm from the pop-up menu and enter the name and password of a Kerberos administrator or a user with delegated Kerberos authority for the server. For an MIT-based Kerberos realm, enter the name and password of a Kerberos administrator, the Kerberos realm name, and the DNS name of the Kerberos KDC server.