Manual Pages for UNIX Operating System command usage for man gkadmin

System Administration Commands                        gkadmin(1M)



NAME
     gkadmin - Kerberos principals  and  policies  administration
     GUI

SYNOPSIS
     /usr/sbin/gkadmin


DESCRIPTION
     gkadmin is an interactive  graphical  user  interface  (GUI)
     that  enables  you to maintain Kerberos principals and poli-
     cies. gkadmin provides much the same  functionality  as  the
     kadmin(1M) command.


     gkadmin does not support the management of keytabs. You must
     use  kadmin  for  keytabs  management. gkadmin uses Kerberos
     authentication and an encrypted RPC to operate securely from
     anywhere on the network.


     When gkadmin is invoked, the login window is populated  with
     default  values.  For the principal name, gkadmin determines
     your user  name  from  the  USER  environment  variable.  It
     appends  /admin  to  the  name  (username/admin) to create a
     default user instance in the same manner as kadmin. It  also
     selects  appropriate  defaults  for  realm  and  master  KDC
     (admin_server) from the /etc/krb5/krb5.conf file.


     You can change these defaults on the login window. When  you
     enter  your  password,  a  session  is started with kadmind.
     Operations performed are subject  to  permissions  that  are
     granted  or  denied  to the chosen user instance by the Ker-
     beros ACL file. See kadm5.acl(4).


     After the session is started, a tabbed folder  is  displayed
     that  contains a principal list and a policy list. The func-
     tionality is mainly the same as kadmin, with addition, dele-
     tion,  and  modification of principal and policy data avail-
     able.


     gkadmin also includes an interface to specify principal  key
     encryption   types  when  modifying  or  creating  principal
     records. The default set of encryption types is used if they
     are  not selected through this interface. The default set of
     encryption types can be  found  in  krb5.conf(4)  under  the
     default_tkt_enctypes section.





SunOS 5.11          Last change: 26 Aug 2005                    1






System Administration Commands                        gkadmin(1M)



     In addition, gkadmin provides the following features:

         o    New principal or policy records can be added either
              from  default  values  or  from  the settings of an
              existing principal.

         o    A comment field is available for principals.

         o    Default values are saved in $HOME/.gkadmin.

         o    A logout option permits  you  to  log  back  in  as
              another user instance without exiting the tool.

         o    Principal and policy lists and  attributes  can  be
              printed or saved to a file.

         o    Online context-sensitive help and general  help  is
              available in the Help menu.

FILES
     /etc/krb5/krb5.conf    Kerberos configuration information on
                            a Kerberos client. Used to search for
                            default   realm   and   master    KDC
                            (admin_server),   including   a  port
                            number for the master KDC.


     $HOME/.gkadmin         Default parameters used to initialize
                            new  principals  created  during  the
                            session.


ATTRIBUTES
     See attributes(5) for descriptions of the  following  attri-
     butes:



     ____________________________________________________________
    |       ATTRIBUTE TYPE        |       ATTRIBUTE VALUE       |
    |_____________________________|_____________________________|
    | Availability                | system/security/kerberos-5  |
    |_____________________________|_____________________________|
    | Interface Stability         | Committed                   |
    |_____________________________|_____________________________|


SEE ALSO
     kpasswd(1),   kadmin(1M),   kadmind(1M),   kadmin.local(1M),
     kdb5_util(1M),   kadm5.acl(4),   kdc.conf(4),  krb5.conf(4),
     attributes(5), kerberos(5)




SunOS 5.11          Last change: 26 Aug 2005                    2






System Administration Commands                        gkadmin(1M)



DIAGNOSTICS
     The gkadmin interface is currently incompatible with the MIT
     kadmind  daemon  interface, so you cannot use this interface
     to  administer  an  MIT-based  Kerberos  database.  However,
     clients  running the Solaris implementation of Kerberos  can
     still use an MIT-based KDC.

















































SunOS 5.11          Last change: 26 Aug 2005                    3