Mac OS X Server 10.5.5: Enabling Kerberos Authentication for PPTP VPN Service

  • Last Modified: September 15, 2008
  • Article: HT2856

Summary

In Mac OS X Server 10.5.5 or later, you can enable Kerberos authentication for the PPTP VPN service.

Products Affected

Mac OS X Server 10.5

First, make sure that your server is properly configured as a member of a Kerberos realm.

Next, execute the following command in a Terminal window:

sudo serveradmin settings vpn:Servers:com.apple.ppp.pptp:EAP:KerberosServicePrincipalName = "vpn/host.domain.com@REALM.COM"

Important: This command must be entered on one line. Replace "host.domain.com" with the fully qualified host name of the server, and "REALM.COM" with the name of the Kerberos realm.

You can now choose Kerberos authentication for the PPTP service in Server Admin.

Not helpful Somewhat helpful Helpful Very helpful Solved my problem