Sample krb.conf File

The sample krb.conf file named krb.conf.sample is available in the /opt/krb5/example directory. Copy this sample file to /opt/krb5/krb.conf file and modify it to reflect the hostnames and realm name for your realm.

	NOTE: The realm names are case sensitive.

Replace the underlined Your_Realm_Name, Your_Secondary_Server1, Your_Secondary_Server2 and hostname.subdomain.domain.com with the name of your Kerberos REALM, Primary and Secondary Servers hostnames.

Your_Realm_Name
Your_Realm_Name Your_Secondary_Server1
Your_Realm_Name Your_Secondary_Server2
Your_Realm_Name host.subdomain.domain.com admin server

Given below is an example with a brief explanation of the krb.conf file.

BAMBI.COM
BAMBI.COM fox.bambi.com
BAMBI.COM goat.bambi.com
BAMBI.COM deer.bambi.com admin server #

Where:

REFERENCE

To view the krb.conf manpage, type the following command at the prompt:

shell%: man krb.conf

Services

The services file contains entries that allow client applications to establish socket connections to the KDC or to the applications servers. A KDC client requires the following entries in the /etc/services file:

#
# Kerberos services
#
kerberos5 88/udp kdc # Kerberos V5 kdc
kerberos5 88/tcp kdc # Kerberos V5 kdc
kerberos-adm 749/tcp # Kerberos 5 admin/changepw
krb5_prop 754/tcp # Kerberos slave propagation
kerberos-cpw 751/tcp kerberos_master # Kerberos changepw

	NOTE: If you do not use the krbsetup tool to configure your Kerberos Server, the services mentioned above should be manually added to the /etc/services file.

REFERENCE

To view the services manpage, issue the following command:

shell%: man services