Harmonic MediaGrid - Page 126

Chapter 4 System Configuration
© 2017 Harmonic Inc. All rights reserved. 126 Harmonic MediaGrid Release 4.1
Joining a Harmonic MediaGrid Cluster to a Windows Domain
c. Replace <ADS Domain Controller FQDN> with the Fully Qualified Domain Name of the
ActiveDirectory server.
4. Generate the file,
/tftpboot/config/gateway/krb5.conf, as shown in Figure 4–3.
Figure 4–3: Sample krb5.conf file
Modify the file as follows:
[libdefaults]
default
_realm = <AD Realm in UPPERCASE>
:
[realms]
<AD Realm in UPPERCASE> = {
kdc = <ADS Domain Controller FQDN>
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
default_realm = EXAMPLE.COM
dns_lookup_realm = false
dns_lookup_kdc = false
ticket_lifetime = 24h
forwardable = yes
[realms]
EXAMPLE.COM = {
kdc = kerberos.example.com:88
admin_server = kerberos.example.com:749
default_domain = example.com
}
[domain_realm]
.example.com = EXAMPLE.COM
example.com = EXAMPLE.COM
[kdc]
profile = /var/kerberos/krb5kdc/kdc.conf
[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
}