HP-UX Reference (11i v2 03/08) - 4 File Formats (vol 8)

k
krb5.conf(4) krb5.conf(4)
ANL.GOV = ES.NET
}
ES.NET = {
ANL.GOV = .
}
The
[capaths] section of the configuration file used on
NERSC.GOV systems would look like this:
[capaths]
NERSC.GOV = {
ANL.GOV = ES.NET
TEST.ANL.GOV = ES.NET
TEST.ANL.GOV = ANL.GOV
PNL.GOV = ES.NET
ES.NET = .
}
ANL.GOV = {
NERSC.GOV = ES.NET
}
PNL.GOV = {
NERSC.GOV = ES.NET
}
ES.NET = {
NERSC.GOV = .
}
TEST.ANL.GOV = {
NERSC.GOV = ANL.GOV
NERSC.GOV = ES.NET
}
}
In the above examples, the ordering is not important, except when the same subtag name is used more
then once. The client will use this to determine the path. (It is not important to the server, since the
transited field is not sorted.)
If this section is not present, or if the client or server cannot find a client/server path, then normal
hierarchical organization is assumed.
This feature is not currently supported by DCE. DCE security servers can be used with Kerberized
clients and servers, but versions prior to DCE 1.1 did not fill in the transited field, and should be used
with caution.
FILES
/etc/krb5.conf
Kerberos configuration file.
/usr/contrib/krb5/sample/krb5.conf.sample
A sample Kerberos configuration file shipped with this product.
AUTHOR
krb5.conf was developed by the Massachusetts Institute of Technology.
SEE ALSO
syslog(3C), kerberos(5).
Section 4−−156 Hewlett-Packard Company − 5 − HP-UX 11i Version 2: August 2003