HP UX Kerberos Data Security Software manual Glossary

Glossary

kpropd.ini

kpropd.ini Propagation configuration file mkpropcf creates using information in the local krb.conf file.

krb.conf File that contains configuration information that describes the default realm of the host, the administration server, and security servers for known realms.

krb.realms The realms file defines host-to-realm or domain-to-realm name mapping data. The krb.realms file is located only on the Kerberos server systems. This file maps host names to realm names.

M

mkpropcf Creates the kpropd.ini file, which is the default propagation configuration file in a propagation hierarchy.

P

password.policy Text file that controls the password policy for all principals.

principal Files that make up the principal database, including principal.dat, principal.idx, and principal.ok.

prop_hostname ASCII cache file created on the propagating security server when the host name security server is unavailable during the principal database propagation cycle. The file contains principal records that could not be propagated from the prop_q file to the receiving server.

prop_hostname_ok Empty file created on the propagating security server after a successful propagation to the host name security server.

prop_q Default propagation input queue file that contains the names of every principal whose record has changed since the last successful database propagation.

prop_q.wrk Temporary working copy of prop_q, the default propagation input queue file.

prpadmin Application used to administer database propagation between servers.

R

rlogin Application that provides log on access to remote systems.

realm Each administrative domain have its own Kerberos database, which contains information about the users and services for that particular site or administrative domain. This administrative domain is the Kerberos realm.

T

telnet Application that connects to a remote host using the telnet protocol.

telnetd Daemon that accepts connections from secured and nonsecured telnet clients.

ticket A certificate issued by an authentication server, which helps verify the user’s identity to any given service.

TGS The Ticket-Granting Service (TGS) authorizes the user to gain access to the network resources by generating and issuing tickets.

TGT Issues tickets to connect to hosts in its own domain.

322 Glossary