Also take a look at the Kerberos server installation basically consists of just two packages — the KDC (Key Distribution Center), which takes care of handling authentication requests and issuing Kerberos tickets, and kadmind (Kerberos master server), which allows Here are the Debconf answers for reference.The listing here includes all questions; some were asked in Kerberos 1.6 packages and some are asked only in Kerberos 1.7 and newer, and their order has changed a little as well.They are created or modified using a Kerberos-specific administrative tool called .

In any case, it's no problem — just answer the subset of questions you are asked: This script should be run on the master KDC/admin server to initialize a Kerberos realm. This password will be used to generate a key that is stored in /etc/krb5kdc/stash.

You should try to remember this password, but it is much more important that it be a strong password than that it be remembered.

Kerberos is intended to centrally authenticate users, hosts and services on the network by verifying them against entries in the Kerberos database.

These entries (called "principals") consist of principal names, secret keys, key aging (expiry) information and Kerberos-specific data.

— Up to date information, show example of configuring SSHThis documentation is free; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

It is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.You can find the proper introduction (and complete documentation) on the Linux-PAM website.Pay special attention to the PAM Configuration File Syntax page.For regular users with no special privileges, no action will be required.For admin users, we will want to grant all privileges, as hinted earlier in the section called “Principal Names”.In advanced networks, that could be retina scans or — Kerberos tickets.