Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Log on to SoftNAS StorageCenter.

...


  1. In the Storage Administration pane on the left, select Settings > Identity and Access Control > Kerberos. 

...


  1. Image Added


    The Kerberos5 Configuration panel will be displayed. 

...


  1. Image Added

...



  1. Enter the the full Active Directory server name in upper case in the Realm text entry box; e.g., YOURDOMAIN.COM, MYDOMAIN.LOCAL.

...


  1. Click the Update Configuration button. 


Verifying Kerberos is Functional

In the above example, SOFTNAS.LOCAL is the full domain name. Log in to a command shell using SSH, SoftNAS Console (VMware) or use the Command Shell. To access the command shell from within the SoftNAS UI, go to Settings > General System Settings, which will open a new window with access to the full Webmin console, then choose Others > Command Shell. Image Removed


Image Added
Once in the command shell, (whichever method you use) issue the following commands:

  1. "kinit" is used to log in as the AD administrator. Note that for best results use the actual domain administrator, not a user with domain admin rights.

  2. Enter the password for administrator@SOFTNAS.LOCAL:
    [root@softnas]# kinit -p administrator

...



  1. Next, list the Kerberos ticket, which proves you successfully logged into AD. 
    [root@softnas]# klist
  2. You should see something like: 

    Ticket cache: FILE:/tmp/krb5cc_0
    Default principal: administrator@SOFTNAS.LOCAL
    Valid starting Expires Service principal
    01/21/13 17:26:12 01/22/13 03:26:20 krbtgt/SOFTNAS.LOCAL@SOFTNAS.LOCAL
    renew until 01/22/13 17:26:12