If IXIASOFT TEXTML Server uses Kerberos
authentication, you must configure Kerberos authentication on the IXIASOFT CCMS Web Server by replacing the template of the krb5.ini Kerberos configuration file in the installation package with the
one configured for your deployment.
For more information on enabling
use Kerberos security, see Installing and Configuring IXIASOFT TEXTML Server for
IXIASOFT CCMS.
-
In the location where you extracted the installation package,
locate the krb5.ini file, which is
provided as a template or placeholder for your Kerberos configuration
file.
-
Replace the krb5.ini
template with a copy of your krb5.ini file
used for the other IXIASOFT CCMS components in
your deployment or edit the template as required.
This file specifies the Kerberos configuration used for
authentication. Configure it as follows:
-
realm
: Kerberos realm name.
This is the Fully Qualified Domain Name (FQDN) of your Active Directory Windows
domain. The domain name is case-sensitive so take note of what is in uppercase
or lowercase in the example of the krb5.ini
Kerberos configuration file. Replace the lowercase acme.local
with your domain name in lowercase and the uppercase
ACME.LOCAL
with your domain name in
uppercase.
kdc
: Kerberos Key Distribution
Center (KDC) host name and port (Windows domain controller).
For
example:
[domain_realm]
.acme.local = ACME.LOCAL
acme.local = ACME.LOCAL
acme = ACME.LOCAL
ACME = ACME.LOCAL
[libdefaults]
default_realm = ACME.LOCAL
dns_lookup_kdc = true
dns_lookup_realm = true
[logging]
[realms]
ACME.LOCAL = {
kdc = dc1.acme.local
kdc = dc2.acme.local
admin_server = dc1.acme.local
default_domain = ACME.LOCAL
}
When you run the installation script, the krb5.ini file is automatically installed in %TomcatDir%\conf where %TomcatDir% is the location where the Apache Tomcat server was installed; for example, c:\Ixiasoft\cmsweb\apache-tomcat-9.0.67 for Windows, or /opt/ixiasoft/cmsweb/apache-tomcat-9.0.67 for Linux.