Administrator's Guide - Kerio Software Archive

Chapter 24 Kerberos AuthenticationFigure 24.2Specification of Kerberos realm in Kerio MailServerSpecify the Open Directory domain name (Kerberos realm) in Kerio MailServer and ensure that:1. Kerio MailServer is a member of the Open Directory domain to be authenticated against.If Kerio MailServer is not the domain member, the Kerberos system will not be workingand the users will have to use a local password, i.e. different from the password for thedomain.2. DNS server (IP address or DNS name of the computer where Apple Open Directory is running)is set correctly at the computer with Kerio MailServer.3. time of Kerio MailServer and Open Directory is synchronized — this should be done automaticallyby adding a host to the domain (see item 1).Authentication against a stand-alone Kerberos serverTo use authentication against a stand-alone Kerberos server (Key Distribution Center), it isnecessary to maintain the username and password database both in Key Distribution Centerand in Kerio MailServer.Specify the Kerberos area (Kerberos realm) name in Kerio MailServer and ensure that:1. Kerio MailServer is a member of the Kerberos area to be authenticated against. Usernamesand passwords of all users created in Kerio MailServer must be defined in the Key DistributionCenter (required for authentication in Kerberos).266