Subject: An Example
Author: eLDAP
In response to: What's inside krb5.conf? -- The [domain_realm] section
Posted on: 02/10/2010 09:10:55 PM
[domain_realm]
.mit.edu = ATHENA.MIT.EDU
mit.edu = ATHENA.MIT.EDU
crash.mit.edu = TEST.ATHENA.MIT.EDU
.fubar.org = FUBAR.ORG
fubar.org = FUBAR.ORG
In this example,
crash.mit.edu maps into the
TEST.ATHENA.MIT.EDU realm. All other hosts in the mit.edu domain map by default to the
ATHENA.MIT.EDU realm, and all hosts in the
fubar.org domain map by default into the
FUBAR.ORG realm. Note the entries for the hosts
mit.edu and
fubar.org. Without these entries, these hosts would be mapped into the Kerberos realms
EDU and
ORG, respectively.
>
> On 02/10/2010 09:06:30 PM
eLDAP wrote:
The [domain_realm] section provides a translation from a domain name or hostname to a Kerberos realm name. The relation can be a host name, or a domain name, where domain names are indicated by a period (`.') prefix. relation-value is the Kerberos realm name for that particular host or domain. Host names and domain names should be in lower case.
If no translation entry applies, the host's realm is considered to be the hostname's domain portion converted to upper case.
References:
