Defining Authentication Service settings for AD Kerberos

Use this procedure to define settings for the TrueSight Server Automation Authentication Service so it can use the Kerberos configurations you set up in previous procedures. To perform this procedure, you must use the Application Server Administration console.

To define Authentication Service settings for AD/Kerberos

1. Start the Application Server Administration console by doing one of the following:
   • (UNIX) From the directory where TrueSight Server Automation is installed, enter the following:
     ./bin/blasadmin
     
   • (Windows) Do one of the following. Both options run the same command.
     • From the Start menu, select Programs > BMC Software > BladeLogic Server Automation Suite > Utilities > Application Server Administration.
     • From the directory where TrueSight Server Automation is installed, enter the following:
       \bin\blasadmin.exe
       
2. To enable Active Directory/Kerberos authentication, enter the following:
   set AuthServer IsADKAuthEnabled true
   By default Active Directory/Kerberos authentication is not turned on.
   
3. To enable the blappserv_krb5.conf file, enter the following:
   set AuthServer AuthSvcKrb5Config <fileName>
   where <fileName> is the name of the blappserv_krb5.conf file. This file is essential for supporting Kerberos.
   By default AuthSvcKrb5Config is set to a value of blappserv_krb5.conf. You can skip this step unless you choose to use a different file name.
   
4. To enable the blappserv_login.conf file, enter the following:
   set AuthServer AuthSvcKrb5LoginConfig <fileName>
   where <fileName> is the name of the blappserv_login.conf file. This file is essential for supporting Kerberos.
   By default AuthSvcKrb5LoginConfig is set to a value of blappserv_login.conf. You can skip this step unless you choose to use a different file name.
   
5. Restart the Application Server (see Restarting a specific Application Server).

Where to go from here

See Cross-registering-users-in-the-TrueSight-Server-Automation-database-AD-Kerberos.