Use this information to enable Kerberos with SSO.
If you want to enable Kerberos without SSO, you will be authenticated using LDAP AD and the password will be sent to the LDAP AD in clear text.
- For importing users - Active Directory is used for importing the users in Alfresco.
- For communicating with the Key Distribution Center (KDC) - In most cases, KDC runs on the Active Directory server, so it needs to be accessible by Alfresco. When Alfresco receives a Kerberos authentication request, it uses Active Directory to import all the users that you are authenticating against into Alfresco.
Active Directory is not used for LDAP authentication; it is used for Kerberos authentication.