Add second realm to existing KDC ?

2019-09-10 Thread chris
Hi, we've been running a very simple MIT krb5 KDC for a single realm for years with no problems. Now, we'd like to add a second realm to the mix. Can it easily be added to the same KDC? We don't need cross-realm trust or anything. If possible, then what would be the steps? Add new realm to kr

Re: Add second realm to existing KDC ?

2019-09-10 Thread Greg Hudson
On 9/10/19 12:25 PM, chris wrote: > Hi, we've been running a very simple MIT krb5 KDC for a single realm for > years with no problems. Now, we'd like to add a second realm to the > mix. Can it easily be added to the same KDC? We don't need > cross-realm trust or anything. To a rough approximat

Re: Add second realm to existing KDC ?

2019-09-10 Thread chris
On 9/10/19 12:43 PM, Greg Hudson wrote: > Add the new realm specification to the config files. Make sure ports > are specified in realm config, not in [kdcdefaults], so that each > process can use separate ports. Create a new database for the new realm. > > Then arrange for krb5kdc to be run wit