Export (0) Print
Expand All

Ksetup:addkpasswd

Published: May 25, 2011

Updated: April 17, 2012

Applies To: Windows Server 2008 R2

Adds a Kerberos password (Kpasswd) server address for a realm. For examples of how this command can be used, see Examples.

ksetup /addkpasswd <RealmName> [<KpasswdName>]

If the Kerberos realm that the workstation will be authenticating to supports the Kerberos change password protocol, you can configure a client computer running the Windows operating system to use a Kerberos password server. This setting is configured on the realm side.

 

Parameter Description

<RealmName>

The realm name is stated as an uppercase DNS name, such as CORP.CONTOSO.COM, and is listed as the default realm or Realm= when ksetup is run.

<KpasswdName>

The KDC name that is to be used as the Kerberos password server is stated as a case insensitive fully-qualified domain name, such as mitkdc.microsoft.com. If the KDC name is omitted, DNS might be used to locate KDCs.

If the Kerberos realm that the workstation will be authenticating to supports the Kerberos change password protocol, you can configure a client computer running the Windows operating system to use a Kerberos password server.

Run the command ksetup to verify the KDC name. If kpasswd = does not appear in the output, the mapping has not been configured.

You can add additional KDC names one at a time.

Configure the realm, CORP.CONTOSO.COM, so that it uses the non-Windows KDC server, mitkdc.contoso.com, as the password server:

ksetup /addkpasswd CORP.CONTOSO.COM mitkdc.contoso.com

This results in a non-Windows Kerberos password server that controls all the passwords for authentication between it and the realm.

Was this page helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

ADD
Show:
© 2014 Microsoft