General Tab (Principal Information Window)

You can use the Principal Information window to add principals or to modify existing principals and ticket information. To add a new principal, select the realm in the HP Kerberos Administrator window and click New. The Principal Information window displays as shown in Figure 8-2 “Principal Information Window”.

Figure 8-2 Principal Information Window

You can use the Principal Information window to specify the Principal name and the LDAP DN.

Table 8-7 “Principal Information Window Components” describes the components of the Principal Information window.

Table 8-7 Principal Information Window Components

Field Name	Description
Principal	You can use this field to enter the name of the new principal.
LDAP DN	Displays the LDAP DN.
General Tab	You can use the General tab on the Principal Information window to specify the ticket information, the password policy file, and values for Last Modified and Modified By, for a new or existing principal.
Password Tab	You can use the Password tab on the Principal Information window to specify the password parameters for the principal. Table 8-10 “Password Tab Components” describes the components of the Password tab.
Attributes Tab	You can use the Attributes tab in the Principal Information window to assign attributes for a principal. Table 8-12 “Attributes Tab Components” describes the components of the Attributes tab.
LDAP Attributes Tab	You can use the LDAP Attributes tab in the Principal Information window to assign LDAP attributes for a principal. This tab is disabled when you are editing an existing Kerberos principal.

Table 8-8 “General Tab Components” describes the components of the General tab.

Table 8-8 General Tab Components

Field Name Description

Principal

Displays the name of the principal that you are editing. If you are adding a new principal, enter the name of the new principal.

Principal Expiration

Displays the principal expiration time, which indicates when the current logon privileges of the principal expire.

Enter one of the following options in the Principal Expiration box:

A date and time in the format HH:MM MM/DD/YYY.
The keyword Never, which indicates that the principal does note expire.

Maximum Ticket Lifetime

Sets the maximum ticket lifetime for a principal. The time must not exceed the corresponding ticket lifetime set for the realm, as controlled by the krbtgt/REALM@REALM principal.

Maximum Renew Time

Sets the maximum renewal time for each individual principal. You must specify a time that does not exceed the corresponding renewal time set for the realm.

To restrict the issuance of renewable tickets, uncheck the Allow Renewable option on the Principal Information window>Attributes tab. You must not enter a renewal time of 0 (zero) seconds. If you enter 0 seconds for the Maximum Renew Time field in the General tab and click OK or Apply, the following warning message is displayed:

Invalid Field Entry

Password Policy

Specifies the password policy name in this field. If you do not specify the password policy name, the default policy is applied.




	NOTE: Do not change the password policy name for reserved service principals.

Last Modified

Specifies the last modified date for the principal. The last modified date and time is automatically updated when you change the principal information.

Modified By

Specifies the name of the user updating the principal.

General Tab (Principal Information Window)

Technical documentation

» Table of Contents

» Glossary

» Index