Search our
entire site
Enter your search
terms below, or visit
our search page

Search case
studies only
Enter your search
terms below:

For the table
of contents and
hyperlinks to
general topics
proceed to toc

Setting Up Kerberos v5 on Windows NT 4.0

1. Get the ZIP file k57a3.zip from ftp://www-ucec.uchicago.edu/pub/kerberos or http://www-ucec.uchicago.edu/kerb.html. You can also get k57a3.tgz if you have tar and gzip.
2. Unzip/untar into the installation directory - there are no subdirectories. You will need unzip 5.0+ or pkunzip 2.04+, I think. GNU tar works great on the tar file.
3. Copy *.dll, krb5.ini, wkrb5.ini into the \WINNT directory
4. Open Control Panel/System and add the following to the environment:
5. TZ=CST6CDT (or whatever your time zone is)
6. Setup a program group and add cns.exe and wkrlogin.exe as shortcuts
7. Contact the sysadmin for the kerberos server to create or verify that you have credentials in the database.
8. Edit \WINNT\krb5.ini and change the Realm section and default servers to those appropriate for the setup. The included files are setup for the U of C, using Andy’s kerberos server (kerberos.uchicago.edu).
9. Run cns.exe and try to login. If it doesn't work, try to decode the cryptic error messages.

Notes:

The above directions should also work for Windows 95, with \WINNT replaced with \WINDOWS. I know that the above software will work under 95, since I have seen it done.

WKRLogin requires that your login name be the same as your kerberos name. There does not seem to be a way to fix that.

I have not yet gotten qvtnet to work - it keeps complaining it can’t find my credentials. This may have something to do with where qvtnet looks for the credentials file - it is a Win 3.11 app, so it could be looking in the Windows directory. Qvtnet.ini must be in the working directory of qvtnet!

There are no help files beyond this and the included readme.txt, even though there are provision for it in the programs. I didn’t get any either.

Send comments to webmaster@www-ucec.uchicago.edu

TABLE OF CONTENTS

Security
Home
Certificates
Checkpoint
Cybercop
Digital Certs.
ICVerify
ISS
IPSEC
Kerberos
Network Security
PKI
SafeSuite
Securify
Security CCI
Security Primer
Slideshows
Tivoli
Validating Users
VPI and CA
Creating VPI
VeriSign