System user for Kerberos constrained delegation

Airlock Gateway has a system user configured to request Kerberos tickets on behalf of an authenticated user. This concept is known as Kerberos constrained delegation.

The following contents show the steps required to create and configure the system user.

Chapter-related prerequisites

  • The previously described configuration steps have been carried out.
  • You need to be logged in as a domain administrator on a domain controller.