Administering the Kerberos Database

After you have installed and configured the Kerberos server v3.12, the Kerberos database contains the default Kerberos principals, their keys, and other administrative information about each of these principals for your realm. For more information on installing your Kerberos server, see Chapter 2 “Installing the Kerberos Server v3.12”.

You can use the Kerberos database utilities, kadmin_ui and kadmin, to globally manage the principals and their utilities. The kadmin_ui utility is the remote graphical user interface, and kadmin is the command-line interface.

The HP Kerberos Administrator is the graphical user interface that you can use to manage your principals and realms. This includes both the remote administrator, kadmin_ui, and the local administrator, kadminl_ui. This chapter contains a detailed description of both the utilities.

The remote command-line administrator, kadmin, contacts the Kerberos database, kadmind, for Kerberos authentication whereas the local administrator, kadminl, does not require a server for authentication. kadminl runs only on the primary security server where the Kerberos database is located. The Kerberos daemon, kadmind, is required for Kerberos authentication.