Group Information Window (Principal Information Window)

You can view or modify the default group settings of a realm using the Group Information window. The default group is similar to a template used to control the settings for new principals added to a realm. Changing the settings for the default group does not affect the settings for existing prinicpals in the realm.

The tabs and fields in this window correspond to the tabs and fields in the Principal Information window. The values that you enter in the Group Information window are provided as default values for new principals added in a realm. You can edit the settings for existing principals by using the tabs in Principal Information window.

To open the Group Information window, choose Principal Information>Edit>Edit Default Group to display the Group Information window (Figure 8-10 “Group Information Window”).

Figure 8-10 Group Information Window

Table 8-14 “Group Information Window Components” describes the components of the Group Information window.

Principal Attributes

You must assign attributes to each principal to control the usage and rights of the account. This section describes the possible attributes and the default settings.

Setting the Default Group Principal Attributes

Before adding principals to the database, you must review the attributes and properties assigned to the default group principal, default@REALM, and establish a set of base attributes for the principal. This default group principal acts as a template, and when the new principals are created, they inherit the attributes of the default principal.

	NOTE: Modifying the default group principal does not update the attributes of existing principals. Therefore, you must consider the assigned attributes before you begin adding principals.

Default Principal Attributes

When you create a realm in a database, the default@REALM principal is automatically created. Every realm contains one default principal that controls the settings for the default group.

To edit the default group, use the HP Kerberos Administrator or the command-line administrator, discussed as follows:

• In the HP Kerberos Administrator window, complete the following steps to edit the default group:

  1. Select a principal from the realm.

  2. Click Edit to open the Principal Information window.

  3. Choose Principal Information>Edit, and select the Edit Default Group option to display the Group Information window (Figure 8-10 “Group Information Window”).

  4. In the Group Information window, you can edit the settings for the default group.

• In the command-line administrator, kadminl, manually edit the default@REALM principal.

  You cannot edit the key and salt type setting for the default group. For more information on using the command-line administrator, type man 1M kadmin or see “Manual Administration Using kadmin”.