- Go to CM > Administration > Settings > click on “Kerberos” on Filters on the left side > locate “KDC Server Host”, enter the KDC host in the text field:
kdc-host1.com
- On the same page, locate “Advanced Configuration Snippet (Safety Valve) for the Default Realm in krb5.conf”, and enter the following into the text area:
kdc = kdc-host2.com
- Save and then “Deploy Kerberos Client Configuration” (you might need to stop all service first before you can do this)
The [realm] section in the krb5.conf will be updated like below:
[realms] TEST.COM = { kdc = kdc-host1.com admin_server = kdc-host1.com kdc = kdc-host2.com }
- Go to CM > Administration > Settings > click on “Kerberos” on Filters on the left side > locate “KDC Server Host”, empty the KDC host in the text field, so that it contains no value
- On the same page, locate “Advanced Configuration Snippet (Safety Valve) for the Default Realm in krb5.conf”, and enter the following into the text area:
kdc = kdc-host1.com kdc = kdc-host2.com admin_server = kdc-host1.com
- Save and then “Deploy Kerberos Client Configuration” (you might need to stop all service first before you can do this)
The [realm] section in the krb5.conf will be updated like below:
[realms] TEST.COM = { kdc = kdc-host1.com kdc = kdc-host2.com admin_server = kdc-host1.com }
kdc =which will break the syntax in krb5.conf file.