Propagation

kpropd.ini

port=port_name Specifies the communication port over which to propagate the database. The value can be a well known service or a numeric value, but must be listed in the Services file. The default port is kerberos-adm.

primary_realm=DEFAULT_REALM Specifies the default realm of the primary security server.

If the krb.conf file does not exist, the DEFAULT REALM is assigned the uppercase equivalent of the domain name.

realms=[allrealm1[, realm2][,...]] Specifies the realms whose records will be propagated to the Secondary Servers. The default value, all, propagates principal records from all realms to all security servers.

service_name=service_principal_name Specifies the name of the service principal with access to the propagation system on the local security server, where service_principal_name is the name of the service principal. The default value is host/fqdn@REALM, where fqdn is the host’s fully qualified domain name, and REALM is the host’s realm name.

[secsrv_name] Section

secsrv_name is the fully qualified domain name of the security server specific to this section.

 

parent=fqdn

Specifies secsvr_name’s parent security server in the

 

 

propagation hierarchy, where fqdn is the parent

 

 

server’s fully qualified domain name. Every security

 

 

server except the primary server must have one and

 

 

only one parent server. The primary server has no

 

 

parent server.

 

 

You cannot override the interval, service_name, or

NOTE

 

 

primary_realm values that you set in the

 

 

[default_values] section.

 

 

 

220

Chapter 7