• Comments
  • Configure realms under krb5.conf file for using AD Authentication for RHEL VMs

    Posted on

    I'm hitting a sticking point here as I've never done this before.

    I'm using the following document from Red Hat for help:

    https://access.redhat.com/sites/default/files/attachments/rhel-ad-integration-deployment-guidelines-v1.5.pdf

    I'm to the part to install/configure Kerberos Client and I'm not sure how to configure the krb5.conf file

    [logging]
     default = FILE:/var/log/krb5libs.log
     kdc = FILE:/var/log/krb5kdc.log
     admin_server = FILE:/var/log/kadmind.log
    [libdefaults]
     default_realm = REFARCH-AD.CLOUD.LAB.ENG.BOS.REDHAT.COM
     dns_lookup_realm = false
     dns_lookup_kdc = false
     ticket_lifetime = 24h
     renew_lifetime = 7d
     forwardable = true
    [realms]
     REFARCH-AD.CLOUD.LAB.ENG.BOS.REDHAT.COM = {
     kdc = WIN-SRV1.REFARCH-AD.CLOUD.LAB.ENG.BOS.REDHAT.COM
     admin_server = WIN-SRV1.REFARCH-AD.CLOUD.LAB.ENG.BOS.REDHAT.COM
     }
    [domain_realm]
     .demo = REFARCH-AD.CLOUD.LAB.ENG.BOS.REDHAT.COM 
    demo = REFARCH-AD.CLOUD.LAB.ENG.BOS.REDHAT.COM
    

    For the default_realm, I believe I'm going to use the FQDN here for the local AD Server, correct

    As for the realms, is this the same thing. I'm not really sure what to do for this part. Basically I'm trying to go thru this because if I do that, then I understand.

    thanks

    by

    points

    Responses

    Red Hat
    © 2025 Red Hat, Inc.