Prerequisite
You have the Technical configuration administrator function privilege.
If you use multiple LDAP systems, the user names must be unambiguous through all LDAP systems. Otherwise, no SSO is possible.
Enable SSO for the servers (Kerberos)
Click Application launcher >
Administration. The Administration opens with the
Configuration view.
Click User Management.
Click the arrow next to Kerberos.
Click General.
Click Edit.
Enable Use Kerberos.
Click Save.
You have enabled Kerberos.
Upload a key table
To upload the key table file, click Upload under the Key table field.
You can display the content of an existing key table file using the JRE tool ktab.exe. To do so, enter the following command on the command line:
ktab -l -e -t -k FILE:C:\<file location of the umc.ktab file>\umc.ktab
If you have no key table file available, generate a key table file using the JRE tool ktab.exe. To do so, enter the following command on the command line:
ktab -a userPrincipalName@REALM password -n 0 -append -k umc.keytab
Upload a configuration file
To upload the configuration file, click Upload under the Configuration file field. You find this file on your installation medium under Add-ons\Kerberos. The dialog for uploading a file opens.
Select the relevant file and click Upload.
You have uploaded a configuration file.