HUONG DAN CAU HINH kerberos va ACTIVE DIRECTORY WINDOWS SERVER 2003
BUOC 1: windows server 2003
IP : 172.16.84.101/24
DG : 172.16.84.2
DNS: 172.16.84.100
dung lenh dcpromo nang cap voi ten mien concung.com

BUOC 2: Centos67
IP : 172.16.84.100/24
DG : 172.16.84.2
#nano /etc/resolv.conf
=========================================================
nameserver 172.16.84.101
nameserver 8.8.8.8
nameserver 8.8.4.4
=========================================================
CAI DAT VA CAU HINH KERBEROS TREN MAY CENTOS67
#yum update 
#yum install krb5-server krb5-libs krb5-workstation
#nano /etc/krb5.conf
Noi dung file cau hinh krb5.conf
==========================================================
[logging]
 default = FILE:/var/log/krb5libs.log
 kdc = FILE:/var/log/krb5kdc.log
 admin_server = FILE:/var/log/kadmind.log

[libdefaults]
 default_realm = CONCUNG.COM
 dns_lookup_realm = false
 dns_lookup_kdc = false
 ticket_lifetime = 24h
 renew_lifetime = 7d
 forwardable = true

[realms]
 CONCUNG.COM = {
  kdc = srv.concung.com
  admin_server = srv.concung.com
 }

[domain_realm]
 .concung.com = CONCUNG.COM
 concung.com = CONCUNG.COM
============================================================================

#rngd -r /dev/urandom
#kdb5_util create -s (abcd is password for kdc !!!!)

#service krb5kdc start ==>OK
#service kadmin  start ==>ok
#service krb5kdc status
#service kadmin status 

#chconfig krb5kdc on 
#chconfig kadmin on

#kadmin.local -q "addprinc administrator/administrator" (tai khoan administrator cua win2k3)

#nano /var/kerberos/krb5kdc/kadm5.acl==>
   Soan noi dung :
===========================================================================
*/admin@CONCUNG.COM	*
*/administrator@CONCUNG.COM	* 
===========================================================================

#service kadmin restart
#kinit administrator@CONCUNG.COM ====>nhap password cua administrator win2k3 la 123
#klist
===>
Ket qua la :
Valid starting     Expires            Service principal
04/12/19 04:07:42  04/12/19 14:08:06  krbtgt/CONCUNG.COM@CONCUNG.COM
        renew until 04/19/19 04:07:42