Krb5.conf - Revision history

Haoqili at 15:55, 18 August 2009

2009-08-18T15:55:38Z

Haoqili: took out old

2009-08-18T15:54:53Z

took out old

Haoqili at 18:53, 17 August 2009

2009-08-17T18:53:05Z

Haoqili at 16:48, 17 August 2009

2009-08-17T16:48:36Z

Haoqili at 14:19, 17 August 2009

2009-08-17T14:19:18Z

Haoqili at 15:55, 15 August 2009

2009-08-15T15:55:20Z

Haoqili: New page: saved in /tmp/krb5.conf

 [libdefaults]         default_realm = EXAMPLE.ORG #       default_keytab_name = FILE:/home/haoqili/trunk/src/tests/kdc_realm2/sandbox/krb5kdc/krb5.keytab    ...

2009-08-15T15:51:32Z

New page: saved in /tmp/krb5.conf <pre> [libdefaults] default_realm = EXAMPLE.ORG # default_keytab_name = FILE:/home/haoqili/trunk/src/tests/kdc_realm2/sandbox/krb5kdc/krb5.keytab ...

New page

saved in /tmp/krb5.conf

<pre>
[libdefaults]
default_realm = EXAMPLE.ORG
# default_keytab_name = FILE:/home/haoqili/trunk/src/tests/kdc_realm2/sandbox/krb5kdc/krb5.keytab
default_tkt_enctypes = des3-hmac-sha1 aes128-cts
default_tgs_enctypes = des3-hmac-sha1 aes128-cts

[realms]
# use "kdc = ..." if realm admins haven't put SRV records into DNS
EXAMPLE.ORG = {
admin_server = A.EXAMPLE.ORG
# admin_server = localhost.localdomain:8886
# kpasswd_server = localhost.localdomain:8887
default_domain = EXAMPLE.ORG
kdc = localhost.localdomain:8888
database_module = LDAP
}
[dbdefaults]
# database_module = LDAP
ldap_kerberos_container_dn = "cn=krbContainer,dc=example,dc=org"

[dbmodules]
LDAP = {
db_library = kldap
ldap_kerberos_container_dn = "cn=krbContainer,dc=example,dc=org"
ldap_kdc_dn = cn=admin,dc=example,dc=org
ldap_kadmind_dn = cn=admin,dc=example,dc=org
ldap_service_password_file = /home/haoqili/trunk/src/tests/kdc_realm2/sandbox/krb5kdc/admin.stash
# ldap_service_password_file = /usr/local/var/krb5kdc/admin.stash
ldap_servers = ldapi:///
}
[domain_realm]
# hamster-schnappi.mit.edu=EXAMPLE.ORG
#h.com= EXAMPLE.ORG
#.h.com= EXAMPLE.ORG

[logging]
kdc = FILE:/tmp/mykdc.log
default = FILE:/tmp/mykrb5.log
admin_server = FILE:/tmp/myadmin.log
#kdc = CONSOLE
</pre>

← Older revision		Revision as of 15:55, 15 August 2009
Line 1:		Line 1:
−	~~saved~~ in /tmp/krb5.conf	+	you can save it in /tmp/krb5.conf<br>
		+	I saved it in /home/haoqili/trunk/src/tests/kdc_realm2/sandbox/krb5.conf
		+

	<pre>		<pre>

@@ Line 1: / Line 1: @@
-/tmp/krb5_t.conf<br>
+save it in /tmp/krb5.conf<br>
 <pre>
 [libdefaults]
@@ Line 10: / Line 10: @@
                 admin_server = A.EXAMPLE.ORG
                 default_domain = EXAMPLE.ORG
-                kdc = %(localFQDN)s:8888
+                kdc = localhost.localdomain:8888
                 database_module = LDAP
+        }
@@ Line 34: / Line 34: @@
 </pre>
 <pre>
 [libdefaults]
@@ Line 48: / Line 45: @@
                 admin_server = A.EXAMPLE.ORG
                 default_domain = EXAMPLE.ORG
-                kdc = localhost.localdomain:8888
+                kdc = %(localFQDN)s:8888
                 database_module = LDAP
+        }

@@ Line 29: / Line 29: @@
 [logging]
-        kdc = FILE:/tmp/mykdc.log
+        kdc = FILE:/tmp/kdc_fromkrb.log
-        default = FILE:/tmp/mykrb5.log
+        default = FILE:/tmp/krb5.log
-        admin_server = FILE:/tmp/myadmin.log
+        admin_server = FILE:/tmp/admin.log
 </pre>
@@ Line 67: / Line 67: @@
 [logging]
-        kdc = FILE:/tmp/mykdc.log
+        kdc = FILE:/tmp/kdc_fromkrb.log
-        default = FILE:/tmp/mykrb5.log
+        default = FILE:/tmp/krb5.log
-        admin_server = FILE:/tmp/myadmin.log
+        admin_server = FILE:/tmp/admin.log
 </pre>

← Older revision		Revision as of 18:53, 17 August 2009
Line 1:		Line 1:
		+	/tmp/krb5_t.conf<br>
		+	<pre>
		+	[libdefaults]
		+	default_realm = EXAMPLE.ORG
		+	default_tkt_enctypes = des3-hmac-sha1 aes128-cts
		+	default_tgs_enctypes = des3-hmac-sha1 aes128-cts
		+
		+	[realms]
		+	EXAMPLE.ORG = {
		+	admin_server = A.EXAMPLE.ORG
		+	default_domain = EXAMPLE.ORG
		+	kdc = %(localFQDN)s:8888
		+	database_module = LDAP
		+	}
		+
		+	[dbdefaults]
		+	ldap_kerberos_container_dn = "cn=krbContainer,dc=example,dc=org"
		+
		+	[dbmodules]
		+	LDAP = {
		+	db_library = kldap
		+	ldap_kerberos_container_dn = "cn=krbContainer,dc=example,dc=org"
		+	ldap_kdc_dn = cn=admin,dc=example,dc=org
		+	ldap_kadmind_dn = cn=admin,dc=example,dc=org
		+	ldap_service_password_file = /tmp/krb5kdc/admin.stash
		+	ldap_servers = ldapi:///
		+	}
		+	[domain_realm]
		+
		+	[logging]
		+	kdc = FILE:/tmp/mykdc.log
		+	default = FILE:/tmp/mykrb5.log
		+	admin_server = FILE:/tmp/myadmin.log
		+	</pre>
		+
		+	--------------------------
		+
	you can save it in /tmp/krb5.conf<br>		you can save it in /tmp/krb5.conf<br>

@@ Line 4: / Line 4: @@
 [libdefaults]
         default_realm = EXAMPLE.ORG
         default_tkt_enctypes = des3-hmac-sha1 aes128-cts
         default_tgs_enctypes = des3-hmac-sha1 aes128-cts
 [realms]
         EXAMPLE.ORG = {
                 admin_server = A.EXAMPLE.ORG
                 default_domain = EXAMPLE.ORG
                 kdc = localhost.localdomain:8888
@@ Line 20: / Line 16: @@
 [dbdefaults]
         ldap_kerberos_container_dn = "cn=krbContainer,dc=example,dc=org"
@@ Line 30: / Line 25: @@
         ldap_kadmind_dn = cn=admin,dc=example,dc=org
         ldap_service_password_file = /tmp/krb5kdc/admin.stash
         ldap_servers = ldapi:///
+        }
 [domain_realm]
 [logging]
@@ Line 42: / Line 33: @@
         default = FILE:/tmp/mykrb5.log
         admin_server = FILE:/tmp/myadmin.log
 </pre>

← Older revision		Revision as of 14:19, 17 August 2009
Line 1:		Line 1:
	you can save it in /tmp/krb5.conf<br>		you can save it in /tmp/krb5.conf<br>
		+
		+	<pre>
		+	[libdefaults]
		+	default_realm = EXAMPLE.ORG
		+	# default_keytab_name = FILE:/home/haoqili/trunk/src/tests/kdc_realm2/sandbox/krb5kdc/krb5.keytab
		+	default_tkt_enctypes = des3-hmac-sha1 aes128-cts
		+	default_tgs_enctypes = des3-hmac-sha1 aes128-cts
		+
		+	[realms]
		+	# use "kdc = ..." if realm admins haven't put SRV records into DNS
		+	EXAMPLE.ORG = {
		+	admin_server = A.EXAMPLE.ORG
		+	# admin_server = localhost.localdomain:8886
		+	# kpasswd_server = localhost.localdomain:8887
		+	default_domain = EXAMPLE.ORG
		+	kdc = localhost.localdomain:8888
		+	database_module = LDAP
		+	}
		+
		+	[dbdefaults]
		+	# database_module = LDAP
		+	ldap_kerberos_container_dn = "cn=krbContainer,dc=example,dc=org"
		+
		+	[dbmodules]
		+	LDAP = {
		+	db_library = kldap
		+	ldap_kerberos_container_dn = "cn=krbContainer,dc=example,dc=org"
		+	ldap_kdc_dn = cn=admin,dc=example,dc=org
		+	ldap_kadmind_dn = cn=admin,dc=example,dc=org
		+	ldap_service_password_file = /tmp/krb5kdc/admin.stash
		+	# ldap_service_password_file = /usr/local/var/krb5kdc/admin.stash
		+	ldap_servers = ldapi:///
		+	}
		+	[domain_realm]
		+	# hamster-schnappi.mit.edu=EXAMPLE.ORG
		+	#h.com= EXAMPLE.ORG
		+	#.h.com= EXAMPLE.ORG
		+
		+	[logging]
		+	kdc = FILE:/tmp/mykdc.log
		+	default = FILE:/tmp/mykrb5.log
		+	admin_server = FILE:/tmp/myadmin.log
		+	#kdc = CONSOLE
		+
		+	</pre>
		+
		+	10:19, 17 August 2009 (EDT)10:19, 17 August 2009 (EDT)[[User:Haoqili\|Haoqili]] 10:19, 17 August 2009 (EDT)
	I saved it in /home/haoqili/trunk/src/tests/kdc_realm2/sandbox/krb5.conf		I saved it in /home/haoqili/trunk/src/tests/kdc_realm2/sandbox/krb5.conf