Kerberos: The Definitive Guide

Configuring Applications

Now that all of the realms have been set up and the cross-realm keys have been established between UNIX.SAMPLE.COM and SAMPLE.COM, we can configure Reflection X for transparent login to the Unix hosts from the Windows domain.

We’ll start by adding a user principal to the Active Directory domain with which we can do some tests along the way. Ensure that the principal has the “Use DES encryption types for this account” checkbox checked, as shown in Figure 9-4.

Figure 9-4. Setting the DES encryption checkbox in the jgarman user’s properties dialog box

Now we continue to configure WRQ Reflection X to use Kerberos authentication for its telnet connections to the Unix hosts. These telnet sessions will then start X11 client programs that will display back on the Windows host. To do this, you’ll need a copy of Reflection X and the freely downloadable Reflection Security Components. More information on Reflection X can be found in Chapter 7 and at the WRQ home page at http://www.wrq.com.

Now we need to set up our first user’s Reflection Security Components. Start the Kerberos Manager application, which can be found inside the Utilities subfolder of the WRQ Reflection folder in the Start Menu’s Programs folder. When Kerberos Manager is started for the first time by a user, it opens the Initial Configuration dialog box pictured in Figure 9-5.

Figure 9-5. Reflection Kerberos ...