ONTAP 9.12.1 commands

50←PDF
  • ONTAP 9.12.1 commands(CA08871-263en.pdf)
  • vserver nfs kerberos realm modify

    Modify a Kerberos realm configuration

    Availability: This command is available to cluster and Vserver administrators at the admin privilege level.

    Description

    The vserver nfs kerberos realm modify command modifies one or more attributes of a Kerberos realm configuration.

    Parameters

    -vserver <vserver name> - Vserver

    This parameter specifies the name of the Vserver for the Kerberos realm configuration that you want to modify.

    -realm <text> - Kerberos Realm

    This optional parameter specifies the name of a Kerberos realm for the configuration.

    [-kdc-vendor <Kerberos Key Distribution Center (KDC) Vendor>] - KDC Vendor

    This optional parameter specifies the KDC vendor. Specify Microsoft if you are using a Microsoft Active Directory server; specify Other if you are using a UNIX server.

    [-kdc-ip <IP Address>] - KDC IP Address

    This optional parameter specifies the IP address of the Kerberos Distribution Center (KDC) server.

    [-kdc-port <integer>] - KDC Port

    This optional parameter specifies the port number of the KDC server. The default setting at the time of creation is 88.

    [-clock-skew <integer>] - Clock Skew

    This optional parameter specifies how many seconds of clock-skew between server and the clients are permitted. The default setting at the time of creation is 300 seconds.

    [-adserver-name <text>] - Active Directory Server Name

    This optional parameter specifies the name of an Active Directory server for the configuration. Use this parameter if you specified the value of -kdc-vendor parameter as Microsoft.

    [-adserver-ip <IP Address>] - Active Directory Server IP Address

    This optional parameter specifies the IP address of an Active Directory server for the configuration. Use this parameter if you specified the value of the -kdc-vendor parameter as Microsoft.

    [-comment <text>] - Comment

    This optional parameter specifies a comment for the Kerberos realm configuration.

    [-adminserver-ip <IP Address>] - Admin Server IP Address

    This optional parameter specifies the IP address of the administrative server. Use this parameter if you specified the value of -kdc-vendor parameter as Other.

    [-adminserver-port <integer>] - Admin Server Port

    This optional parameter specifies the port number of the administrative server. The default setting at the time of creation is 749. Use this parameter if you specified the value of the -kdc-vendor parameter as Other.

    [-passwordserver-ip <IP Address>] - Password Server IP Address

    This optional parameter specifies the IP address of the password server. Use this parameter if you specified the value of -kdc-vendor parameter as Other.

    [-passwordserver-port <integer>] - Password Server Port

    This optional parameter specifies the port number of the password server. The default setting at the time of creation is 464. Use this parameter only if you specified the value of -kdc-vendor parameter as Other.

    Examples

    The following example modifies the Kerberos realm SEC.EXAMPLE.COM for the Vserver named AUTH to use a Microsoft KDC server with the IP address 192.0.2.170 and an Active Directory server named AUTH.SEC.EXAMPLE.COM with the IP address 192.0.2.170:

    cluster1::> vserver nfs kerberos realm modify -vserver AUTH -realm SEC.EXAMPLE.COM -adserver-name AUTH.SEC.EXAMPLE.COM -adserver-ip 192.0.2.170 -kdc-ip 192.0.2.170 -kdc-vendor Microsoft
    Top of Page