Setting up a Network Shell proxy server for AD Kerberos


If you cross-register users in Active Directory and RBAC and then you run an ACL Push Job on a server, Network Shell users might not be able to communicate directly with the agent on that server because the agent expects user names to include domain information (such as mary@SUB1.DEV.MYCOMPANY.COM). Network Shell user names do not include domain information.

To avoid this issue and maintain communication with agents using Network Shell, set up a Network Shell proxy server. For more information, see Setting-up-a-Network-Shell-proxy-server.

Where to go from here

See Adding-users-to-built-in-roles-for-AD-Kerberos.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*