Server Configuration > Post Install Server Security > Special Considerations for Kerberos and Kerberos Single Sign On > Additional Realm Settings
 
Additional Realm Settings
If you are using a security scheme with a Windows or Windows SSO security realm, you need to uncomment and specify values for the following properties in security.properties:
mks.security.kerberosRealmName
mks.security.kdcAddress
* 
The realm name must be entered in uppercase. If the realm name is not entered in uppercase, users cannot log in.
Contact your network administrator to get the name and address of the security realm. If you are using Kerberos SSO, the values for these properties must match the domain name specified in the ktpass command.
To specify multiple domains, uncomment and specify values for the following properties in security.properties:
mks.security.kerberosRealmName
mks.security.kdcAddress
mks.security.kerberosRealmName.1
mks.security.kdcAddress.1
mks.security.kerberosRealmName.2
mks.security.kdcAddress.2
The root or main domain for the forest should be specified in the default settings. The children should be specified in the other settings, for example:
mks.security.kerberosRealmName=ABCDOMAIN.COM
mks.security.kdcAddress=hqntdc1.ABCDOMAIN.COM:88
mks.security.kerberosRealmName.1=CHILD1.ABCDOMAIN.COM
mks.security.kdcAddress.1=hqchild1.CHILD1.ABCDOMAIN.COM:88
mks.security.kerberosRealmName.2=CHILD2.ABCDOMAIN.COM
mks.security.kdcAddress.2=hqchild1.CHILD2.ABCDOMAIN.COM:88