This article shows how to configure the options for Active Directory with Kerberos in IGEL OS.
...
Menu path: Security > Active Directory/Kerberos
Image RemovedImage Added
Enable
...
| _SvIncludePlusContent-_Icon activated |
---|
|
...
| _SvIncludePlusContent-_Icon activated |
---|
|
The The Kerberos basic configuration will be carried out.
...
| _SvIncludePlusContent-_Icon deactivated |
---|
|
...
| _SvIncludePlusContent-_Icon deactivated |
---|
|
The The Kerberos basic configuration will not be carried out. (Default)
Default domain (fully qualified domain name)
This value must match the Windows domain on which the logon is to take place. The value must be entered in upper case letters. e.g. EXAMPLE.COM
.
DNS lookup for domain controller
...
| _SvIncludePlusContent-_Icon activated |
---|
|
...
| _SvIncludePlusContent-_Icon activated |
---|
|
In order to find the Key Distribution Centers (KDCs, domain controllers) and other servers for a realm, if they are not explicitly indicated, DNS SRV records are used. (Default)
...
| _SvIncludePlusContent-_Icon deactivated |
---|
|
...
| _SvIncludePlusContent-_Icon deactivated |
---|
|
The KDCs entered under Security > Active Directory/Kerberos > Domain 1 1 ... Domain 4 Domain 4 will be used.
DNS lookup for domain
...
| _SvIncludePlusContent-_Icon activated |
---|
|
...
| _SvIncludePlusContent-_Icon activated |
---|
|
In order to determine the Kerberos realm of a host, DNS TXT records are used. (Default)
...
| _SvIncludePlusContent-_Icon deactivated |
---|
|
...
| _SvIncludePlusContent-_Icon deactivated |
---|
|
The details under under Setup > Security > Active Directory/Kerberos > Domain Realm Mapping Mapping are used.
Obtain Addressless Tickets
...
| _SvIncludePlusContent-_Icon activated |
---|
|
...
| _SvIncludePlusContent-_Icon activated |
---|
|
The first Kerberos ticket is addressless. This may be necessary if the client is located behind an Network Address Translation (NAT) device. (Default)
...
Child pages (Children Display) |
---|