Adding a Realm

A realm is a collection of principals that reside in the same administrative domain. Your network naming scheme, network topology, security policy and company organization determine which principals and services you put in a relam.

Within a realm, all prinicpals share the same security and administrative policy.

When you add a realm, kadminl_ui automatically creates some reserved principals, which must remain in the database.

To add a realm

1. In the kadminl_ui window, choose the Realms tab

2. Click New to display the Realm Information window

3. In the Realm field, type the name of the new realm

4. Click OK

5. If you want to include the realm in inter-realm authentication, then create the ticket-granting service principal for inter-realm authentication. Refer to Chapter 8 “Inter-realm”, for more information on inter-realm authentication.