HP-UX Reference (11i v1 05/09) - 4 File Formats (vol 8)

k
krb5.conf(4) krb5.conf(4)
The [capaths] section of the configuration file used on NERSC.GOV systems would look like this:
[capaths]
NERSC.GOV = {
ANL.GOV = ES.NET
TEST.ANL.GOV = ES.NET
TEST.ANL.GOV = ANL.GOV
PNL.GOV = ES.NET
ES.NET = .
}
ANL.GOV = {
NERSC.GOV = ES.NET
}
PNL.GOV = {
NERSC.GOV = ES.NET
}
ES.NET = {
NERSC.GOV = .
}
TEST.ANL.GOV = {
NERSC.GOV = ANL.GOV
NERSC.GOV = ES.NET
}
}
In the above examples, the ordering is not important, except when the same subtag name is used more
then once. The client will use this to determine the path. (It is not important to the server, since the tran-
sited field is not sorted.)
If this section is not present, or if the client or server cannot find a client/server path, then normal
hierarchical organization is assumed.
This feature is not currently supported by DCE. DCE security servers can be used with Kerberized clients
and servers, but versions prior to DCE 1.1 did not fill in the transited field, and should be used with cau-
tion.
FILES
/etc/krb5.conf
Kerberos configuration file
AUTHOR
krb5.conf was developed by the Massachusetts Institute of Technology.
SEE ALSO
kerberos(9), syslog(3C).
Section 4−−148 Hewlett-Packard Company − 5 − HP-UX 11i Version 1: September 2005