...
- Download and install the latest MIT Kerberos for Windows - Use .msi if available
- Choose "Typical Installation"
- Once the client is installed, open it and choose "Get Ticket". Enter your <netid>@UCONN.EDU and password to create a ticket.
...
- Download the latest version of PUTTY for Windows
- Choose the version "A Windows Installer for everything except PuttyTel" (you will need the PuttyGen tool)
- Use the PUTTYGen tool to create an SSH key for your system (including moving your mouse when instructed to randomize the key)
- Place a request to a UITS admin to grant you access to the Gateway server so you can create tunnels using a proxy
- Set up a Saved Session with tunnels in PUTTY
- Ensure your SSH settings are correct
- Expand the SSH tab
- Configure the security settings for SSH version 2.
- Configure GSSAPI settings as ENABLED for SSH-2
- Configure your tunnels
- Tunnels should use a local port of 1521 or 152(X) if you have multiple tunnels set up (ex: both dbserver01 and dbserver02) remote port is 1521.
- "destination" will be dbserver02.uits.uconn.edu for non-production systems and dbserver01.uits.uconn.edu for production
- Once create, these tunnels should be saved in your PUTTY profile.
Edit the Kerberos configuration file
The Kerberos configuration file must include the settings for UCONN servers:
[realms]UCONN.EDU = {
kdc = kerberos.uconn.edu
admin_server = kadmin.uconn.edu
}
On Windows, the krb5.ini is located in a hidden directory, c:\ProgramData\MIT\Kerberos5
In Unix, the file is located in /etc
Create or edit the existing one and include the realms section.View file name krb5.ini height 250