Use the Administrator instead of the Command-Line-Administrator option
to add the principal account. Refer to, “kadmin
Vs kadminl”, for more information on using the Administrator and
the Command-Line-Administrator.
While it is possible to use the kadmin option
to create an administrative principal, it cannot be used to assign
administrative privileges. If you must use the kadmin utilities
to manage your administrative prinicpals, use a text editor to add
the required entries to the file.
 |
| |
|
 | NOTE: You need to be logged
in as a root user in order to execute the
tasks mentioned above. These tasks must be performed on the Primary Security
Server. |
|
| |
|
For the first administrative principal, we recommend that
you assign all permissions, indicated by '*' in the admin_acl_file. Refer to “admin_acl_file”, for more information.
To
add an administrative principal using the Administrator |
|
Run Administrator,
kadminl_ui
Add a new principal to the
default realm using the following syntax:
identifier/admin@DEFAULT_REALM
Assign password
Using the Edit-> Edit Administrative Permissions menu, assign ALL administrative permissions to
the principal
On the Attributes tab, clear the Require Password Change Checkbox.
Save your changes and close
the Administrator
The principal account, by default, requires a password change
at the first logon. However, kadmin does
not permit password changes, unless you have explicit permissions
to do so.
To enable authentication, you must disable the password change requirement
when you create the administrative principal account.
If you are using the kadminl_ui, go
to the Attributes tab on the Principal Information Window and clear the Require Password Change checkbox. If you are using kadminl,
use the mod command and set nopwchg to indicate no password change is required.
You can also disable the password change requirement by setting
the NoReqChangePwd setting in the principal's password policy file
to 1.
Refer to “Administrator”,
for more information on using the Administrator.
To
add an administrative principal using the Remote Command-Line-Administrator |
|
Run Command-Line-Administrator,
kadmin
Add a new principal to the
default realm using the following syntax:
command: add
Name of Principal to add: admin
Enter password:password
Re-enter password for verification:password
Principal added
Refer to “Manual
Administration Using kadmin”,
for more information on assigning administrative privileges to principals.
Printable version
