8.1 Interoperability with the MIT KDC

8.1.1 Accessing Services in mitrealm from novlrealm

To access services, set up a cross-realm authentication between novlrealm and mitrealm as follows:

  1. In novlrealm, create a principal named krbtgt/mitrealm@novlrealm.

  2. In mitrealm, create a principal named krbtgt/mitrealm@novlrealm.

  3. In the appropriate Kerberos configuration file (/etc/krb5.conf), create entries for novlrealm and mitrealm.

IMPORTANT:Make sure that in both realms the password or key for krbtgt/mitrealm@novlrealm is the same.

8.1.2 Accessing Services in novlrealm from mitrealm

To access services, set up cross-realm authentication between novlrealm and mitrealm:

  1. In mitrealm, create a principal named krbtgt/novlrealm@mitrealm.

  2. In novlrealm, create a principal named krbtgt/novlrealm@mitrealm.

  3. In the appropriate Kerberos configuration file (/etc/krb5.conf), create entries for novlrealm and mitrealm.

IMPORTANT:Make sure that in both realms the password or key for krbtgt/novlrealm@mitrealm is same.