Heimdal krb5.conf sections

Love Hörnquist Åstrand lha at kth.se
Mon Jan 28 14:41:18 EST 2008


28 jan 2008 kl. 19.15 skrev Russ Allbery:

> Victor Sudakov <vas at mpeks.no-spam-here.tomsk.su> writes:
>
>> According to the man page, some options such as ticket_lifetime,
>> renew_lifetime etc can be used both in the [appdefaults] and
>> [libdefaults] sections. What is the difference between the usages?
>
> At least with MIT, [libdefaults] affects the library default and will
> affect any application that uses Kerberos.  [appdefaults] will only  
> affect
> applications that explicitly read krb5.conf and look for appdefaults
> settings.  I would *assume* that Heimdal is the same.

Its, heimdal will use both for some options, this is because  
appdefault supports the concepts of per realms options.

Love





More information about the Kerberos mailing list