Archived - Mac OS X Server 10.5.5: Enabling Kerberos Authentication for PPTP VPN Service

Summary

In Mac OS X Server 10.5.5 or later, you can enable Kerberos authentication for the PPTP VPN service.

Products Affected

Mac OS X Server 10.5

This article has been archived and is no longer updated by Apple.

First, make sure that your server is properly configured as a member of a Kerberos realm.

Next, execute the following command in a Terminal window:

sudo serveradmin settings vpn:Servers:com.apple.ppp.pptp:EAP:KerberosServicePrincipalName = "vpn/host.domain.com@REALM.COM"

Important: This command must be entered on one line. Replace "host.domain.com" with the fully qualified host name of the server, and "REALM.COM" with the name of the Kerberos realm.

You can now choose Kerberos authentication for the PPTP service in Server Admin.

Not helpful Somewhat helpful Helpful Very helpful Solved my problem
Ask other users about this article
in Apple Support Communities
See all questions on this article See all questions I have asked