Skip to main content

vserver nfs kerberos realm modify

Contributors
Suggest changes
PDFs

Modify a Kerberos realm configuration

Availability: This command is available to cluster and Vserver administrators at the admin privilege level.

Description

The vserver nfs kerberos realm modify command modifies one or more attributes of a Kerberos realm configuration.

Parameters

-vserver <vserver name> - Vserver

This parameter specifies the name of the Vserver for the Kerberos realm configuration that you want to modify.

-realm <text> - Kerberos Realm

This optional parameter specifies the name of a Kerberos realm for the configuration.

[-kdc-vendor <Kerberos Key Distribution Center (KDC) Vendor>] - KDC Vendor

This optional parameter specifies the KDC vendor. Specify Microsoft if you are using a Microsoft Active Directory server; specify Other if you are using a UNIX server.

[-kdc-ip <IP Address>] - KDC IP Address

This parameter specifies the IP address of the Kerberos Distribution Center (KDC) server.

[-kdc-port <integer>] - KDC Port

This optional parameter specifies the port number of the KDC server. The default setting at the time of creation is 88.

[-clock-skew <integer>] - Clock Skew

This optional parameter specifies how many minutes of clock-skew between server and the clients are permitted. The default setting at the time of creation is 5 minutes.

[-adserver-name <text>] - Active Directory Server Name

This parameter specifies the name of an Active Directory server for the configuration. Use this parameter if you specified the value of -kdc-vendor parameter as Microsoft.

[-adserver-ip <IP Address>] - Active Directory Server IP Address

This parameter specifies the IP address of an Active Directory server for the configuration. Use this parameter if you specified the value of the -kdc-vendor parameter as Microsoft.

[-comment <text>] - Comment

This optional parameter specifies a comment for the Kerberos realm configuration.

[-adminserver-ip <IP Address>] - Admin Server IP Address

This optional parameter specifies the IP address of the administrative server. Use this parameter if you specified the value of -kdc-vendor parameter as Other.

[-adminserver-port <integer>] - Admin Server Port

This optional parameter specifies the port number of the administrative server. The default setting at the time of creation is 749. Use this parameter if you specified the value of the -kdc-vendor parameter as Other.

[-passwordserver-ip <IP Address>] - Password Server IP Address

This optional parameter specifies the IP address of the password server. Use this parameter if you specified the value of -kdc-vendor parameter as Other.

[-passwordserver-port <integer>] - Password Server Port

This optional parameter specifies the port number of the password server. The default setting at the time of creation is 464. Use this parameter only if you specified the value of -kdc-vendor parameter as Other.

Examples

The following example modifies the Kerberos realm SEC.EXAMPLE.COM for the Vserver named AUTH to use a Microsoft KDC server with the IP address 192.0.2.170 and an Active Directory server named AUTH.SEC.EXAMPLE.COM with the IP address 192.0.2.170:

cluster1::> vserver nfs kerberos realm modify -vserver AUTH -realm SEC.EXAMPLE.COM -adserver-name AUTH.SEC.EXAMPLE.COM -adserver-ip 192.0.2.170 -kdc-ip 192.0.2.170 -kdc-vendor Microsoft