Using the Administration Console > Set up Kerberos connectivity > Configure Kerberos in the administration console

Configure Kerberos in the administration console

To add the KDC information, including the keytab file, to Authentication Service:

1.	In Horizon Connector, go to Configure > Authentication.

2.	Fill in the fields on this page as follows:

Field	Description	Example
KDC	Enter the host name or IP address of your KDC machine.	kdc.mycompany.com
Keytab	Browse to and select the location of the keytab file.	C:\temp\ec.keytab

 

Note  The Domain and Principal fields are read-only at this stage. These fields will be populated with your Windows domain and the principal (/princ argument) used by the ktpass utility after you have uploaded the keytab file and rebooted the Authentication Service VM.

3.	Click Save and Restart.

4.	Reboot the Authentication Service VM.

Note  Selecting only Save and Restart is not sufficient at this stage: you must reboot the whole VM for Kerberos to be started.

After reboot, note that it takes several minutes to start up all services. Once the post-reboot configuration is complete, the Kerberos service on the Manage > Status page of the administration console should have a green status indicator. If the status indicator is not green, click on the Kerberos service, then click Start.

At this stage it is also recommended that you reconfirm the connection to your directory service by entering the test URL as described in Test the directory connection. If required, you can restart the directory service on the Manage > Status page.

Using the Administration Console > Set up Kerberos connectivity > Configure Kerberos in the administration console