K5 @ LNF

Created on: 29-Aug-2007
Last update: 29-Feb-2008

The Kerberos 5 authentication protocol is used by the Computing Services of the LNF to authenticate users to all services ( network/TRIP, mailing, AFS, interactive login, Trouble Ticket System, etc.).

Users who want to use Kerberos Authentication from their PC, need to install Kerberos 5 software and configure it with the following parameters:

• In Section [realms] add:

  	 LNF.INFN.IT = {
  	   kdc = kdc5s3.lnf.infn.it:88
  	   kdc = kdc5s2.lnf.infn.it:88
  	   kdc = kdc5s1.lnf.infn.it:88
  	   kdc = kdc5s0.lnf.infn.it:88
  	   kdc = kdc5p.lnf.infn.it:88
  	   admin_server = kdc5p.lnf.infn.it:749
  	   default_domain = lnf.infn.it
          }
  	

• In Section [domain_realm] add:

  	 .lnf.infn.it = LNF.INFN.IT
           lnf.infn.it  = LNF.INFN.IT
  	

• If you want to configure LNF.INFN.IT K5 realm as default, in Section [libdefaults] add:

  	  default_realm = LNF.INFN.IT
  	

You can also download krb5.conf file from: http://www.lnf.infn.it/computing/afs/krb5.conf

For Microsoft Windows users installing MIT KFW (Kerberos For Windows) provide "http://www.lnf.infn.it/computing/afs/" as path for web download during the setup (click here for details)

mail to: Sandro.Angius@lnf.infn.it / Sandro Angius