Administrator

The Administrator is a Graphical-User-Interface that is used to administer the principal database.

Use the Administrator to:

There are two different versions of the Administrator, namely

The local administrator, kadminl_ui, is available only on the primary server.

The remote administrator, kadmin_ui, can be installed on secondary security servers and clients to permit remote administration of the principal database.

Location

Local Administrator on the primary security server:

Remote Administrator on secondary security servers and clients:

	NOTE: You must add the first administrative principal using the Local Administrator, kadminl, located on the primary server before you can use the Remote Command-Line-Administrator, kadmin from a secondary server or client.

You do not need to log in as a admin principal to the Local Administrator, any user with root access to the primary security server can run the Local Administrator.

Alternatively, to log in to the Remote Administrator, you must use a principal account that has an entry in the admin_acl_file. For complete access to all the functions use the an unrestricted administrative principal account, one with the '*' permissions in the admin_acl_file. At a minimum, the account must have inquire privileges. For more information, refer to “admin_acl_file”.

Both the Local and Remote Administrators have been discussed in detail in the sections subsequent to this chapter.

Standard Functionality of the Administrator

This section contains the standard descriptions applicable to all windows in the kadminl_ui's HP's Kerberos Administration window.

When a window has OK, Apply and Cancel buttons, the buttons perform the following actions:

OK

Saves your changes and closes the active window. If the window has multiple tabs the changes for all the tabs are saved.

Apply

Saves your changes but keeps the active window open. If the window has multiple tabs the changes for all the tabs are saved.

Cancel

Discards the changes made by you and closes the active window. If the window has multiple tabs then the changes that you have made in all the tabs are also discarded.