configurelocalkdc(1) [mojave man page]

configureLocalKDC(1)					    BSD General Commands Manual 				      configureLocalKDC(1)

NAME

     configureLocalKDC -- generate a LocalKDC

SYNOPSIS

     configureLocalKDC

DESCRIPTION

     configureLocalKDC generates a LocalKDC and provisions LKDC service principals.  The script is non-destructive and can be run multiple times.

FILES

     configureLocalKDC does not own, but references the following files:

     /Library/Keychains/System.keychain
     /var/db/krb5kdc/kdc.conf
     /System/Library/LaunchDaemons/edu.mit.Kerberos.krb5kdc.plist
     /Library/Preferences/com.apple.AppleFileServer
     /Library/Preferences/SystemConfiguration/com.apple.smb.server

SEE ALSO

     systemkeychain(8), certtool(1), checkLocalKDC(1), kdcsetup(1), launchctl(1), kadmin(8), defaults(1)

HISTORY

     configureLocalKDC first appeared in version 10.5 of Mac OS X.

Darwin								  August 30, 2007							    Darwin

kdcsetup(1)						    BSD General Commands Manual 					       kdcsetup(1)

NAME

     kdcsetup -- Kerberos -- Open Directory Single Sign On

SYNOPSIS

     kdcsetup [-v debug_level] [-a admin_name] [-p password] REALM

DESCRIPTION

     kdcsetup is a tool for configuring an Apple Open Directory KDC. It creates the needed Kerberos files and data for an Open Director master.

     -v debug_level  Controls the amount of output generated by kdcsetup.  0 prints errors and very basic information.	1 prints generatal status
		     information.  Higher levels may add progressively more detail.

     -a admin_name   Name of a directory administrator authorized to make changes in Open Directory.  This admin will be used as the administrator
		     in the KDC database.  Required parameter.	Note: this is not a principal name.

     -p password     The password for the above admin.	Required parameter.

     REALM	     The name of the realm that this KDC serves.  Required parameter.

FILES

     /var/db/krb5kdc/		    directory where all the config & database files for the KDC are stored
     /var/log/krb5kdc/		    directory where the log files from the KDC are written

NOTES

     kdcsetup is automatically run when creating an Open Directory Master.  It should NEVER be run manually and will likely be deprecated in the
     future.

SEE ALSO

     kadmind(8), kdc(8), kerberos(8), krbservicesetup(8), opendirectoryd(8), sso_util(8)

Darwin								   June 1, 2019 							    Darwin