specifying an alternate realm/krb5.conf configuration for kdc5.conf

Todd Grayson tgrayson at cloudera.com
Fri Apr 24 17:07:28 EDT 2015


Are you trying to run multiple realms (and db's) on the same KDC?

On Fri, Apr 24, 2015 at 2:59 PM, Ben H <bhendin at gmail.com> wrote:

> Sorry, I did mean kdc.conf - and on my implementation it is
> in /var/kerberos/krb5kdc.
>
> I do understand:
> kdc.conf = server config
> krb5.conf = client config
>
> But apparently when krb5kdc starts it also queries some data from
> /etc/krb5.conf (the default realm at least).
>
> I want it to look to a location other than /etc/krb5.conf for realm
> information (or anything else it might need from that file).
>
> thanks!
>
>
> On Fri, Apr 24, 2015 at 2:55 PM, Brandon Allbery <ballbery at sinenomine.net>
> wrote:
>
> > On Fri, 2015-04-24 at 14:44 -0500, Ben H wrote:
> > > Some searching I did indicated the possible existence of a "profile"
> > > directive in kdc5.conf to point to a different krb5.conf, but that
> > > didn't
> > > seem to work.
> >
> > It's just kdc.conf (not kdc5.conf) and it's usually kept in the KDC
> > private directory (/var/krb5kdc is common).
> >
> > --
> > brandon s allbery kf8nh                           sine nomine associates
> > allbery.b at gmail.com                              ballbery at sinenomine.net
> > unix openafs kerberos infrastructure xmonad        http://sinenomine.net
> >
> > ________________________________________________
> > Kerberos mailing list           Kerberos at mit.edu
> > https://mailman.mit.edu/mailman/listinfo/kerberos
> >
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>



-- 
Todd Grayson
Customer Operations Engineering


More information about the Kerberos mailing list