Configuring the Kerberos authentication

This recipe shows how to configure the Kerberos authentication with Orchestrator. The Kerberos configuration is only needed for special plugins, such as PowerShell.

Getting ready

We just need administrative access to the Orchestrator operating system. You need to make sure that the clocks are in sync between Orchestrator and the KDC. See the Tuning the appliance recipe in this chapter. The domain in this example is called mylab.local and the AD server (KDC) is called central.mylab.local.

How to do it...

1. Log in to the Orchestrator operating system with root.
2. Edit the /usr/java/jre-vmware/lib/security/krb5.conf file. You might have to create this file.
3. Add the following lines to the file. In the following example, replace mylab.local with your domain settings. Make sure that you use the same case as in the example:

         [libdefaults] 
            default_realm = MYLAB.LOCAL 
           ...