<Realm-name>

HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Domains\

Description

The <Realm-name> subkey stores configuration data for a non-Windows-based Kerberos realm. Non-Windows Kerberos servers use realms instead of Windows domains.

Kerberos Setup (Ksetup.exe), a tool included with the Windows 2000 Support Tools, adds this subkey to the registry when you use Ksetup to create a Kerberos realm. The Kerberos Security Provider in Windows 2000 uses the data in the subkey to locate a non-Windows Kerberos Key Distribution Center and interoperate with the Kerberos realm.

This subkey bears the name you assign to the realm when you use the /SetRealm command in Kerberos Setup.

Change method

To add, delete, or change the configuration of a Kerberos realm, use Kerberos Setup (Ksetup.exe), a tool included in Windows 2000 Support Tools.

Note Image Note

The <Realm-name> subkey does not actually appear in the registry. It is a variable used to describe the elements common to realm-specific subkeys in the Domains subkey.

Tip Image Tip

For more information about KSetup.exe, see Tools Help in the Windows 2000 Support Tools. For more information about Kerberos interoperability features, see MIT Kerberos 5 (krb5 1.0) Interoperability on the Windows 2000 Server Security Services Web site.