Editing Kerberos configuration

You can use System Manager to enable Kerberos and edit a Kerberos configuration associated with a Storage Virtual Machine (SVM). This enables the SVM to use Kerberos security services for NFS.

Before you begin

You must have at least one Kerberos realm configured at the SVM level.
You must have a minimum of two data LIFs on the SVM.
One data LIF is used by the Service Principal Name (SPN) for both the UNIX and CIFS-related Kerberos traffic. The other data LIF is used for accessing non-Kerberos traffic.

Note: The CIFS server is not required for basic NFS Kerberos access. It is required for multiprotocol access or when using Active Directory as an LDAP server for name mapping purposes.

About this task

If you are using Microsoft Active Directory Kerberos, the first 15 characters of any SPNs used in the domain must be unique. Microsoft Active Directory has a limitation for SPNs of 15 characters maximum and does not allow duplicate SPNs.

Procedure

Click the SVMs tab.
Select the SVM, and then click Manage.
Click the SVM Settings tab.
In the Services pane, click Kerberos Interface.
In the Kerberos Interface window, select the interface, and then click Edit.
In the Edit Kerberos Configuration dialog box, make the necessary changes, and then click OK.