[4392] in Kerberos

home help back first fref pref prev next nref lref last post

krb.realms in K4

daemon@ATHENA.MIT.EDU (Matt Perry)
Wed Dec 21 03:19:06 1994

To: kerberos@MIT.EDU
Date: Tue, 20 Dec 1994 20:17:33 GMT
From: mattp@apertus.com (Matt Perry)

I am trying to understand the role of the krb.realms file for the
server, the client and the end-service in K4.

Does the server's krb.realm file need to be migrated to each host with
and end-service on it and each client which may need to use those 
end-services?

Does the krb.conf file associate a realms with a server and
the krb.realms file associate a host/end-service with a realm?

Is this example correct?

host1 and host2 are both running service rcmd and are in REALM2 

host3 is running service rcmd in REALM1.

All clients get thier tickets from server1 in REALM3.

All machines are in the same domain foo.bar.edu.

krb.conf
REALM3
REALM3 server1.foo.bar.edu admin server

krb.realms
FOO.BAR.EDU REALM3
host1.foo.bar.edu REALM2
host2.foo.bar.edu REALM2
host3.foo.bar.edu REALM1

Who needs this krb.realms mapping information?  The client? The server?
The end-service?

Since I am not sure how it works I really don't see its application.
Any help on this would be appreciated.

Matt Perry
mattp@apertus.com

home help back first fref pref prev next nref lref last post