Active Directory/Kerberos

Menu path: Setup > Security > Active Directory / Kerberos

• Enable

  ☑

  The Kerberos basic configuration will be carried out.

  ☐

  The Kerberos basic configuration will not be carried out. (default)

• Default domain (Fully Qualified Domain Name): This value must match the Windows domain on which the logon is to take place, e.g. EXAMPLE.COM.

  

  The value must be entered in upper case letters.

• DNS lookup for domain controller

  ☑

  In order to find the key distribution centers (KDCs, domain controllers) and other servers for a realm, DNS SRV records are used if they are not explicitly indicated. (default)

  ☐

  The key distribution centers entered under Setup > Security > Active Directory/Kerberos > Domain 1 ... Domain 4 will be used.

• DNS lookup for domain

  ☑

  In order to determine the Kerberos realm of a host, DNS TXT records are used. (default)

  ☐

  The details under Setup > Security > Active Directory / Kerberos > Domain Realm Mapping are used.

• Obtain addressless tickets

  ☑

  The first Kerberos ticket is addressless. This may be necessary if the client is located behind an NAT device (Network Address Translation). (default)

_____