Still On Progress (not done yet)…..
Server using FreeBSD 7.2
Install kerberos
[root@freeBSD] cd /usr/ports/security/krb5-17
[root@freeBSD] make install
Edit /etc/rc.conf and add these lines,
kerberos5_server=”/usr/local/sbin/krb5kdc”
kadmind5_server=”/usr/local/sbin/kadmind”
kerberos5_server_enable=”YES”
kadmind5_server_enable=”YES”
Edit /etc/krb5.conf and add these lines,
[libdefaults]
default_realm = EXAMPLE.ORG
[realms]
EXAMPLE.ORG = {
kdc = kerberos.example.org
admin_server = kerberos.example.org
}
[domain_realm]
.example.org = EXAMPLE.ORG
[logging]
kdc = FILE:/var/log/kerberos/krb5kdc.log
admin_server = FILE:/var/log/kerberos/kadmin.log
default = FILE:/var/log/kerberos/krb5lib.log
Create Logging Directory and Files,
[root@freeBSD] mkdir /var/log/kerberos
[root@freeBSD] touch /var/log/kerberos/{krb5kdc,kadmin,krb5lib}.log
[root@freeBSD] chmod -R 750 /var/log/kerberos
Create Initial Database,
[root@freeBSD] kdb5_util create -r EXAMPLE.ORG -s
Starting the services,
[root@freeBSD] /usr/local/sbin/krb5kdc
[root@freeBSD] /usr/local/sbin/kadmind
Adding kerberos policy,
[root@freeBSD] kadmin.local
kadmin.local: add_policy -minlength 8 -minclasses 3 admin
kadmin.local: add_policy -minlength 8 -minclasses 4 host
kadmin.local: add_policy -minlength 8 -minclasses 4 service
kadmin.local: add_policy -minlength 8 -minclasses 2 user
kadmin.local: quit
Adding default acl,
[root@freeBSD] echo */admin * >> /usr/local/var/krb5kdc/kadm5.acl
Create First Privileges Principal,
kadmin.local: addprinc -policy admin root/admin
Enter password for principal "root/admin@EXAMPLE.ORG": PASSWORD
Re-enter password for principal "root/admin@EXAMPLE.ORG": PASSWORD
Principal "root/admin@EXAMPLE.ORG" created.
kadmin.local: quit
Kerberized SSH,
kadmin.local: addprinc -policy host -randkey host/kerberos.example.org
Principal "host/kerberos.example.org@EXAMPLE.ORG" created.
kadmin.local: ktadd -k /etc/krb5.keytab -norandkey host/kerberos.example.org
Alter