Administering the Kerberos Server
Using Groups to Control Settings
Chapter 8182
Using Groups to Control Settings
You can modify the default values used for new principals using the
Principal Information window (Figure 8-2). Each realm has a default
group, and the default group for the realm contains default values.
The values that you specify for the default group are inherited by all new
principals in that realm. A default group is similar to a template that
controls the settings for a new principal. This template is called
default@REALM. When a new realm is created, this template is
automatically added to the principal database.
While adding or editing a single principal, you can elect to override the
default values of the group. If the default values set during installation
are not what you commonly use for new principals, edit the default group
for the realm. When you edit the template settings, settings for the
previously created principals are not changed.
Editing the Default Group
To edit the default group, complete the following steps:
Step 1. In the HP Kerberos Administrator window, choose the Principals tab
and select the realm of the principal.
Step 2. Click New to open the Principal Information window as shown in
Figure 8-2.
Step 3. Choose Principal Information>Edit, and select the Edit Defaults
Group option to display the Group Information window (Figure 8-10).
Step 4. In the Group Information window, set the new default values in the
General tab, the Password tab, and the Attributes tab. The fields in these
tabs are identical to the fields in the corresponding Principal Information
window tabs (Figure 8-2).
Step 5. Click OK to close the Group Information window.
Step 6. Click OK to close the Principal Information window.
