KRB.EXTRA(5)

NAME
krb.extra - Kerberos misc configuration file

DESCRIPTION
krb.extra contains a number of settings that are used by the kerberos library, or directly by applications. Each line in the file consists of a variable, an equal sign, and a value. Lines beginning with hash are ignored.

Currently defined variables are:

kdc_timeout
    time in seconds to wait for an answer from the KDC (default is 4 seconds)

kdc_timesync
    if this is enabled, the time differential between the client and the KDC will be stored, and used later on when computing the correct time; this is useful if the client's clock is drifting

firewall_address
    the outside address of the firewall; this is used in some places to compute a direction bit, and this might break if the server has a different idea about which address to use then the client

krb4_proxy
    address of a web-proxy to use when connecting to the KDC via HTTP

krb_default_tkt_root
    the default prefix for ticket files. E.g, if your uid is 42 and the prefix is /tmp/tkt then your default ticket file will be /tmp/tkt42

krb_default_keyfile
    the default kefile, normally /etc/srvtab

nat_in_use
    if a Network Address Translator (NAT) is being used.

EXAMPLES

    # this is a comment
    krb_default_tkt_root = /tkt/tkt_
    kdc_timesync = yes
    firewall_address = 10.0.0.1
    krb_default_keyfile = /etc/kerberosIV/srvtab

SEE ALSO
krb.equiv(5), krb.conf(5), krb.realms(5)