Configuring the Kerberos Server With
Configuration Files for the Kerberos Server
To create comments, use the hash sign (#). Any characters after a # sign are ignored. Blank lines and any leading or trailing white spaces in a line are also ignored.
To identify multiple hosts that belong to the same realm in a single entry, use one of the wildcard characters described in Table
Table | Wildcard Characters | ||
|
|
| |
| Wildcard Character | Description | |
|
|
|
|
| . (period) |
| Begin the name field with a period |
|
|
| followed by a domain name to designate |
|
|
| that all hosts in the specified domain |
|
|
| belong to the indicated realm. |
|
|
| For example, to indicate that the hosts |
|
|
| sales.bambi.com and mrkt.bambi.com |
|
|
| belong to REALM1, add the following entry |
|
|
| in your krb.realms file: |
|
|
| .bambi.com REALM1 |
|
|
|
|
| * (asterisk) |
| Begin the name field with an asterisk (*) |
|
|
| followed by a parent domain name to |
|
|
| designate all hosts in subdomains that |
|
|
| belong to the indicated realm. |
|
|
| For example, to indicate that hosts |
|
|
| bob.sales.bambi.com and |
|
|
| man.john.sales.bambi.com belong to |
|
|
| REALM2, add the following entry in your |
|
|
| krb.realms file: |
|
|
| *.sales.com REALM2 |
|
|
|
|
68 | Chapter 5 |