The User Source Settings panel lets you search for and select a keytab file used for Kerberos authentication. All Kerberos server machines need a keytab file to authenticate to the Key Distribution Center (KDC). The keytab file is an encrypted, local, on-disk copy of the host's key.
Before you can import the keytab file, you must set up a Kerberos service principal account and generate a keytab file for that account. For more information, see Kerberos (Active Directory or Domain Services for Windows).
To import the keytab file, click to search for the file, then click
.After importing the keytab file, you can enable Kerberos authentication while adding a user source. To do so, click the
tab, then click in the User Sources panel to launch the Create New User Source Wizard. You can also enable Kerberos authentication on an existing user source. To do so, click the tab, click the user source, then click next to Authentication Mechanisms in the General section.