Can i use a different ADS server as KDC for Kerberos authentication ?

Hi all:
   For some security concerns, I cannot use my central ADS as KDC and run ktpss, setspn in central ADS.
   Can I use another ADS server as KDC server and run ktpass, setspn to configure the Kerberos ?

My portal UME is configured to central ADS as Database+LDAP
I donot want to make the central ADS as KDC server running. I just want to make another ADS server as KDC server, is it possible ?

Similar Messages

  • How can portal use two different LDAP Server in UME

    Hi,
    My question is Can UME in portal be configured for multiple LDAP sources.Currently i have a setting in portal
    as follows:
    Server Name : Abcd
    port : 1234
    user : CN=" ",Ou=" ",Ou=" ",Dc=AD,Dc=my company,Dc=com
    password :
    user path : DC=AD,Dc=My company,Dc=Com
    group Path : same as user path
    I want to configure one more LDAP server to my portal UME,how can give values for that in above sttings.I even want these current settings to be enabled.
    Do anyone have idea on this.
    Thanks and Regards
    Rani A

    Hi again ,
    I know it can be done. But how urgent is this for you.
    I can get back to you in couple of days, me lil busy today.
    cheers,
    Anu...

  • How Can i Use two Different Public IP Addresses no my DMZ with ASA Firewall.

    How To Using Two Different Public IP Address on My DMZ with ASA 5520
    Postado por jorge decimo decimo em 28/Jan/2013 5:51:28
    Hi everyone out there.
    can any one please help me regarding this situation that im looking for a solution
    My old range of public ip address are finished, i mean (the 41.x.x.0 range)
    So now i still need to have in my DMZ another two servers that will bring some new services.
    Remember that those two server, will need to be accessable both from inside and from outside users (Internet users) as well.
    So as i said, my old range of public ip address is finished and we asked the ISP to gives some additional public
    ip address to address the need of the two new servers on DMZ. and the ISP gave us the range of 197.216.1.24/29
    So my quation is, on reall time world (on the equipment) how can i Use two different public ip address on the same DMZ
    on Cisco ASA 5520 v8??
    How my configuration should look like?
    I was told about implementing static nat with Sub Interfaces on both Router and ASA interface
    Can someone please do give me a help with a practical config sample please. i can as well be reached at [email protected]
    attached is my network diagram for a better understanding
    I thank every body in advance
    Jorge

    Hi,
    So looking at your picture you have the original public IP address range configured on the OUTSIDE and its used for NAT for different servers behind the ASA firewall.
    Now you have gotten a new public IP address range from the ISP and want to get it into use.
    How do you want to use this IP address range? You want to configure the public IP addresses directly on the servers or NAT them at the ASA and have private IP addresses on the actual servers (like it seems to be for the current server)?
    To get the routing working naturally the only thing needed between your Router and Firewall would be to have a static route for the new public network range pointing towards your ASA OUTSIDE IP address. The routing between your Router and the ISP core could either be handled with Static Routing or Dynamic Routing.
    So you dont really need to change the interface configuration between the Router and ASA at all. You just need a Static route pointing the new public IP address towards the ASA outside IP address.
    Now when the routing is handled between the ISP - ISP/Your Router - Your Firewall, you can then consider how to use those IP addresses.
    Do you want to use the public IP addresses DIRECTLY on the HOSTS behind the firewall?This would require you to either configure a new physical interface with the new public IP address range OR create a new subinterface with the new public IP addresses range AND then configure the LAN devices correspondingly to the chosen method on the firewall
    Do you want to use the public IP addresses DIRECLTY on the ASA OUTSIDE as NAT IP addresses?This would require for you to only start configuring Static NAT for the new servers between the inside/dmz and outside interface of the ASA. The format would be no different from the previous NAT configuration other than for the different IP addresses ofcourse
    Of the above ways
    The first way is good because the actual hosts will have the public IP addresses. Therefore you wont run into problems with DNS when the LAN users are trying to access the server.
    The second way is the one requiring the least amount of configurations/changes on the ASA. In this case though you might run into problem with DNS (to which I refer above) as the server actually has a private IP address but the public DNS might reply to the LAN hosts with a public IP address and therefore connections from LAN could fail. This is because LAN users cant connect to the servers OUTSIDE NAT IP address (unless you NAT the server to public IP address towards LAN also)
    Hopefully the above was helpfull. Naturally ask more specific questions and I'll answer them. Hopefully I didnt miss something. But please ask more
    I'm currently at Cisco Live! 2013 London so in the "worst case" I might be able to answer on the weekend at earliest.
    - Jouni

  • (261680070) Q WWO-2   Can I use a different vendor to host Workshop web services?

    Q<WWO-2> Can I use a different container(say IBM websphere) to host my "BEA workshop
    implemented" web services?
    A<WWO-2> The web services generated by Workshop (.jws files, .ctrl files, etc), while
    they are J2EE compliant, are not likely to be ubiquitously deployable to over Java
    application servers (at least not yet). However, BEA has proposed the .jws file structure
    to be Java standard for making web services. Only time will tell how this is accepted
    in the Java community.

    I would just like to correct my comment in response to the previous statement. You
    can build the appropriate .ear file by using the jwsCompile facility. This really
    a java class but a DOS command, jwsCompile.cmd, has been provided for you in the
    c:\bea\weblogic700b\samples\workshop folder. When you use the -ear option with this
    command you can specify the appropriate output enterprise application (invoke it
    without arguments to see what your options are). This application can then be deployed
    to a cluster in a WLS domain.
    "Adam FitzGerald" <[email protected]> wrote:
    >
    Q<WWO-7> Can I deploy "web services" to a cluster?
    A<WWO-7> Yes you certainly can. While the test environment for Workshop
    is a single
    server with an exploded directory structure the real deployment component
    is a .ear
    file containing all the appropriate J2EE compliant generated classes (not
    accessible
    thorugh Workshop but available with the servicegen Ant task). Enterprise
    applications
    can be targeted to clusters.

  • HT204053 If I have set up my Mac with two different users,  can I use two different Apple IDs on the same Mac?

    If I have set up my Mac with two different users,  can I use two different Apple IDs on the same Mac?

    Each user account may have its own Apple ID.

  • Can I use two different devices with different apple ID for backing up data on one machine without losing any data that was backed up with one device earlier?

    Can I use two different devices with different apple ID for backing up data on one machine without losing any data that was backed up with one device earlier?

    The link is to a discussion started on 12/18 in the FiOS Internet forum.  Here's the link I get now, however it is different than the link I pulled a few hours ago.  If this system changes the link again, it may not work.
    http://forums.verizon.com/t5/FiOS-Internet/Frustration-and-just-confused-with-internet-help-please/t...
    You can also look for the topic, "frustration and just confused" in the FiOS Internet forum.
    Here's a link that is in the thread that gives more detail.
    https://secure.dslreports.com/faq/15984
    Good Luck!
    P.S.  "Copper Contributor" is my "rank."  gs0b is my user name.
    If a forum member gives an answer you like, give them the Kudos they deserve. If a member gives you the answer to your question, mark the answer as Accepted Solution so others can see the solution to the problem.

  • Can I use two different itune accounts on one computer?

    Can I use two different itune accounts on one computer?

    1. Give her a separate user account on your computer. If you have a backup copy of the library, you can restore it.
    2. If you encounter a 90-day waiting period, click here and ask the iTunes Store staff if they'll remove it.
    (125941)

  • How can I use a different Apple ID withthe App Store?

    When I access the App Store from my iPhone 3G it asks me to enter the password for an Apple ID.
    How can I use a different Apple ID with the App Store?

    It will use the account you are currently signed into with iTunes when you synced. So in iTunes, change your account, then sync. Then the iPhone will use that one.

  • How can I use two differant iphones on one itunes

    I can i use two differant iphones on one itunes, and keep the content seperate?

    You can sync as many iphones/ipod/ipads as you like to one computer.
    Each is different and is recognized as such

  • Can I use one subscription of Acrobat Pro XI for my 3 different computers I use?

    Can I use one subscription of Acrobat Pro XI for my 3 different computers I use?

    [discussion moved to Acrobat Installation & Update Issues forum]

  • Can I use 2 different iPhones (and iTunes libraries) with one ATV2?  How?

    My wife and I just bought an ATV2. We both have and use iPhone 3Gs's. I installed the remote app on both phones, but I am only able to control the ATV2 with the first phone I synced with ATV2. It doesn't seem that ATV2 cares what library it links to since the user has to turn on "Home Sharing" in their individual iTunes account. ATV2 appears to be set up so that you can choose what library you want to use (Under the settings). So can I use two different iPhones with one ATV2?

    You can home-share multiple libraries but only use one account at a time. So both phones would need to be signed in under the same apple ID.

  • How can i use 2 different apple ids for imessage and facetime on 1 ipad?

    How can i use 2 different apple ids for imessage and facetime on 1 ipad?

    Do you mean can you use one Apple ID for FaceTime and one for iMessage? You should be able to. Or, do you mean, can you log into iMessage (or FaceTime) with two Apple IDs at once? No.

  • SLI - Can I use two different video card versions for SLI?

    Hello,
    Can I use two different generations of MSI video cards that implement the same GPU for SLI?   
    The two video cards are:
    MSI N260GTX-T2D896-OCv2 GeForce GTX 260 896MB <-- What I currently have
    MSI N260GTX-T2D896-OCv3 GeForce GTX 260 896MB
    MSI N260GTX-T2D896-OCv4 GeForce GTX 260 896MB
    The main difference between these three seems to be that the OCv3 has two fans and a different heatsink than the OCv2.  The OCv4 has one fan like the OCv2 and but it is located in a different location and some weird spikey heatsink thing going on.  I already have the OCv2 but I am looking to get another card for SLI and newegg doesn't sell the OCv2 anymore.  The important thing is that I am looking for is stability and it seems that the most ideal setup would be to get identical cards.
    By the way, why are there so many versions (updates?) to this card?  Have there been issues related to the card that necessitate a revision?
    Thanks

    Different coolers(HS and fans) and possibly different makers of vRAM.  But, you should be able to run SLI without issues regardless of the versions.

  • HT204053 can I use 2 different apple id's and one itunes id for two seperate I-phones?

    can I use 2 different apple id's and one itunes id for two seperate I-phones?

    Welcome to the Apple Community.
    Yes.

  • HT201342 Can I use a different email address as well as iCloud one

    Can I use a different email address as well as my iCloud one

    Not from within iCloud. The iCloud email service uses iCloud email addresses.
    You can setup any email address on your devices separately to iCloud though.

Maybe you are looking for