kdcsetup(1) General Commands Manual kdcsetup(1)

kdcsetup — Kerberos — Open Directory Single Sign On

kdcsetup [-v debug_level] [-a admin_name] [-p password] REALM

kdcsetup is a tool for configuring an Apple Open Directory KDC. It creates the needed Kerberos files and data for an Open Director master.

debug_level
Controls the amount of output generated by kdcsetup. 0 prints errors and very basic information. 1 prints generatal status information. Higher levels may add progressively more detail.
admin_name
Name of a directory administrator authorized to make changes in Open Directory. This admin will be used as the administrator in the KDC database. Required parameter. Note: this is not a principal name.
password
The password for the above admin. Required parameter.
REALM
The name of the realm that this KDC serves. Required parameter.

/var/db/krb5kdc/
directory where all the config & database files for the KDC are stored
/var/log/krb5kdc/
directory where the log files from the KDC are written

kdcsetup is automatically run when creating an Open Directory Master. It should NEVER be run manually and will likely be deprecated in the future.

kadmind(8), kdc(8), kerberos(8), krbservicesetup(8), opendirectoryd(8), sso_util(8)

Tue Mar 11 2003 Darwin