blob: 565232376dedda8d5606f24e889236f994f9bd14 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
|
.\" $Id: krb.extra.5,v 1.4 1999/11/25 05:30:42 assar Exp $
.\"
.Dd June 24, 1999
.Dt KRB.EXTRA 5
.Os KTH-KRB
.Sh NAME
.Nm krb.extra
.Nd Kerberos misc configuration file
.Sh DESCRIPTION
.Nm
contains a number of settings that are used by the kerberos library,
or directly by applications. Each line in the file consists of a
variable, an equal sign, and a value. Lines beginning with hash are
ignored.
.Pp
Currently defined variables are:
.Bl -tag -width foo
.It kdc_timeout
time in seconds to wait for an answer from the KDC (default is 4
seconds)
.It kdc_timesync
if this is enabled, the time differential between the client and the
KDC will be stored, and used later on when computing the correct time;
this is useful if the client's clock is drifting
.It firewall_address
the outside address of the firewall; this is used in some places to
compute a direction bit, and this might break if the server has a
different idea about which address to use then the client
.It krb4_proxy
address of a web-proxy to use when connecting to the KDC via HTTP
.It krb_default_tkt_root
the default prefix for ticket files. E.g, if your uid is 42 and the
prefix is /tmp/tkt then your default ticket file will be /tmp/tkt42
.It krb_default_keyfile
the default kefile, normally /etc/srvtab
.It nat_in_use
if a Network Address Translator (NAT) is being used.
.El
.Sh EXAMPLES
.Bd -literal
# this is a comment
krb_default_tkt_root = /tkt/tkt_
kdc_timesync = yes
firewall_address = 10.0.0.1
krb_default_keyfile = /etc/kerberosIV/srvtab
.Ed
.Sh SEE ALSO
.Xr krb.equiv 5 ,
.Xr krb.conf 5 ,
.Xr krb.realms 5
|
