HP-UX Reference (11i v3 07/02) - 4 File Formats (vol 8)

k
krb5.conf(4) krb5.conf(4)
TEST.ANL.GOV = {
ANL.GOV = .
}
PNL.GOV = {
ANL.GOV = ES.NET
}
NERSC.GOV = {
ANL.GOV = ES.NET
}
ES.NET = {
ANL.GOV = .
}
The [capaths] section of the configuration file used on
NERSC.GOV systems would look like this:
[capaths]
NERSC.GOV = {
ANL.GOV = ES.NET
TEST.ANL.GOV = ES.NET
TEST.ANL.GOV = ANL.GOV
PNL.GOV = ES.NET
ES.NET = .
}
ANL.GOV = {
NERSC.GOV = ES.NET
}
PNL.GOV = {
NERSC.GOV = ES.NET
}
ES.NET = {
NERSC.GOV = .
}
TEST.ANL.GOV = {
NERSC.GOV = ANL.GOV
NERSC.GOV = ES.NET
}
}
In the above examples, the ordering is not important, except when the same subtag name is used more
then once. The client will use this to determine the path. (It is not important to the server since the tran-
sited field is not sorted.)
If this section is not present, or if the client or server cannot find a client/server path, then normal
hierarchical organization is assumed.
This feature is not currently supported by DCE. DCE security servers can be used with Kerberized clients
and servers, but versions prior to DCE 1.1 did not fill in the transited field and should be used with caution.
FILES
/etc/krb5.conf
Kerberos configuration file.
/usr/contrib/krb5/sample/krb5.conf.sample
A sample Kerberos configuration file shipped with this product.
AUTHOR
krb5.conf was developed by the Massachusetts Institute of Technology.
HP-UX 11i Version 3: February 2007 − 6 − Hewlett-Packard Company 205