Heimdal krb5.conf sections

Russ Allbery rra at stanford.edu
Mon Jan 28 13:15:26 EST 2008


Victor Sudakov <vas at mpeks.no-spam-here.tomsk.su> writes:

> According to the man page, some options such as ticket_lifetime,
> renew_lifetime etc can be used both in the [appdefaults] and
> [libdefaults] sections. What is the difference between the usages?

At least with MIT, [libdefaults] affects the library default and will
affect any application that uses Kerberos.  [appdefaults] will only affect
applications that explicitly read krb5.conf and look for appdefaults
settings.  I would *assume* that Heimdal is the same.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>



More information about the Kerberos mailing list