Updated: Summary of standard Kerberos service names

Russ Allbery rra at stanford.edu
Mon Mar 1 16:48:26 EST 2004


Henry B Hotz <hotz at jpl.nasa.gov> writes:

> Service names needing a machine instance:

We use webauth/system.example.com for WebAuth v3.  See:

    <http://webauthv3.stanford.edu/>

S/Ident uses ident.system and ident/system.example.com.  See:

    <http://www.eyrie.org/~eagle/software/sident/>

The Oracle calendar server uses uniengd/* principals that take a fully
qualified system name.  It looks like at least some configurations of
protocols to do Sieve configuration use sieve/* principals that take a
fully qualified system name.

I don't know how you want to classify x500dsa.* and ldapserver.*, both of
which are used for K4 binds to LDAP (the K5 protocol tends to use ldap/*
instead).  Under K4 they take unqualified system names.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>


More information about the krbdev mailing list