Security Guide > Security Guide > Configuring Vector to Use Kerberos > Kerberos Configuration in the Enterprise > Kerberos Configuration Files--Configure Kerberos for Vector
Was this helpful?
Kerberos Configuration Files--Configure Kerberos for Vector
Here are examples of Kerberos configuration files. These examples assume that the KDC resides on the node foo.xyz.com and the Kerberos domain is named MYDOMAIN.XYZ.COM,
The krb5.conf file may look like this:
[libdefaults]
    default_realm = MYDOMAIN.XYZ.COM
 
[realms]
    SSF.XYZ.COM = {
        kdc = foo.xyz.com
        admin_server = foo.xyz.com
    }
 
[domain_realm]
        .xyz.com = MYDOMAIN.XYZ.COM
        xyz.com = MYDOMAIN.XYZ.COM
 
[logging]
    kdc = FILE:/var/log/krb5kdc.log
    admin_server = FILE:/var/log/kadmin.log
    default = FILE:/var/log/krb5lib.log
The kdc.conf file may look like this:
[kdcdefaults]
    kdc_ports = 88
 
[realms]
    MYDOMAIN.XYZ.COM = {
        kadmind_port = 749
        max_life = 12h 0m 0s
        max_renewable_life = 7d 0h 0m 0s
        master_key_type = des3-hmac-sha1
        supported_enctypes = des3-hmac-sha1:normal des-cbc-crc:normal des-cbc-crc:v4
    }
Last modified date: 11/09/2022