@end titlepage
@comment node-name, next, previous, up
-@node Top, Introduction, (dir), (dir)
+@node Top, Copyright, (dir), (dir)
@ifinfo
This document describes how to administrate a @value{PRODUCT}
installation.
-@include copyright.texinfo
-@end ifinfo
-
@c The master menu is updated using emacs19's M-x texinfo-all-menus-update
@c function. Don't forget to run M-x texinfo-every-node-update after
@c you add a new section or subsection, or after you've rearranged the
@c ---------------------------------------------------------------------
@menu
+* Copyright::
* Introduction::
* How Kerberos Works::
* Administrating Kerberos Database Entries::
* Appendix::
@end menu
-@node Introduction, How Kerberos Works, Top, Top
+@node Copyright, Introduction, Top, Top
+@unnumbered Copyright
+@include copyright.texinfo
+@end ifinfo
+
+
+@node Introduction, How Kerberos Works, Copyright, Top
@chapter Introduction
@menu
* Why Should I use Kerberos?::
-* @value{PRODUCT} Documentation::
+* Documentation for Kerberos V5::
* Overview of This Guide::
@end menu
-@node Why Should I use Kerberos?, @value{PRODUCT} Documentation, Introduction, Introduction
+@node Why Should I use Kerberos?, Documentation for Kerberos V5, Introduction, Introduction
@section Why Should I use Kerberos?
Since Kerberos negotiates authenticated, and optionally encrypted,
@value{PRODUCT} from @value{COMPANY} will play a vital role in the
security of your network.
-@node @value{PRODUCT} Documentation, Overview of This Guide, Why Should I use Kerberos?, Introduction
-@section @value{PRODUCT} Documentation
-
-This document is one piece of the document set for @value{PRODUCT}. The
-documents, and their intended audiences, are:
+@node Documentation for Kerberos V5, Overview of This Guide, Why Should I use Kerberos?, Introduction
+@section Documentation for @value{PRODUCT}
@include document-list.texinfo
-@node Overview of This Guide, , @value{PRODUCT} Documentation, Introduction
+@node Overview of This Guide, , Documentation for Kerberos V5, Introduction
@section Overview of This Guide
The next chapter describes how Kerberos works.
which are files known as @dfn{keytabs}.@footnote{Keytabs were called
@dfn{srvtabs} in Kerberos V4.} For example, the service keys used by
services that run as root are usually stored in the keytab file
-@code{/etc/v5srvtab}. @b{N.B.:} This service key is the equivalent of
-the service's password, and must be kept secure. Data which is meant to
-be read only by the service is encrypted using this key.
+@code{/etc/krb5.keytab}. @b{N.B.:} This service key is the equivalent
+of the service's password, and must be kept secure. Data which is meant
+to be read only by the service is encrypted using this key.
@node The User--Kerberos Interaction, Definitions, Network Services and the Master Database, How Kerberos Works
@section The User--Kerberos Interaction
* Keytabs::
* Clock Skew::
* Getting DNS Information Correct::
-* Configuring Your Firewall to Work With @value{PRODUCT}::
+* Configuring Your Firewall to Work With Kerberos V5::
@end menu
@node Keytabs, Clock Skew, Application Servers, Application Servers
@table @b
@item -k @i{keytab}
use @i{keytab} as the keytab file. Otherwise, @code{ktadd} will use the
-default keytab file (@code{/etc/v5srvtab}).
+default keytab file (@code{/etc/krb5.keytab}).
@item -q
run in quiet mode. This causes @code{ktadd} to display less verbose
@b{kadmin:} ktadd host/@value{RANDOMHOST1}.@value{PRIMARYDOMAIN}@@@value{PRIMARYREALM}
@b{kadmin: Entry for principal host/@value{RANDOMHOST1}.@value{PRIMARYDOMAIN}@@@value{PRIMARYREALM} with
kvno 2, encryption type DES-CBC-CRC added to keytab
- WRFILE:/etc/v5srvtab.
+ WRFILE:/etc/krb5.keytab.
kadmin:}
@end group
@end smallexample
@table @b
@item -k @i{keytab}
use @i{keytab} as the keytab file. Otherwise, @code{ktremove} will use
-the default keytab file (@code{/etc/v5srvtab}).
+the default keytab file (@code{/etc/krb5.keytab}).
@item -q
run in quiet mode. This causes @code{ktremove} to display less verbose
If the host is not likely to be rebooted frequently, you may also want
to set up a cron job that adjusts the time on a regular basis.
-@node Getting DNS Information Correct, Configuring Your Firewall to Work With @value{PRODUCT}, Clock Skew, Application Servers
+@node Getting DNS Information Correct, Configuring Your Firewall to Work With Kerberos V5, Clock Skew, Application Servers
@section Getting DNS Information Correct
Several aspects of Kerberos rely on name service. In order for Kerberos
@smallexample
@group
viola# klist -k
-Keytab name: /etc/v5srvtab
+Keytab name: /etc/krb5.keytab
KVNO Principal
---- ------------------------------------------------------------
1 host/@value{RANDOMHOST1}.@value{PRIMARYDOMAIN}@@@value{PRIMARYREALM}
and then @code{klist}, the host's service principal should be
@i{host/fully-qualified-hostname@@REALM_NAME}.
-@node Configuring Your Firewall to Work With @value{PRODUCT}, , Getting DNS Information Correct, Application Servers
+@node Configuring Your Firewall to Work With Kerberos V5, , Getting DNS Information Correct, Application Servers
@section Configuring Your Firewall to Work With @value{PRODUCT}
If you need off-site users to be able to get Kerberos tickets in your
@end iftex
@end titlepage
-@node Top, Introduction, (dir), (dir)
+@node Top, Copyright, (dir), (dir)
@comment node-name, next, previous, up
@ifinfo
This file documents how to install the @value{RELEASE} release of
@value{PRODUCT}.
-@include copyright.texinfo
-
-@end ifinfo
-
@c The master menu is updated using emacs19's M-x texinfo-all-menus-update
@c function. Don't forget to run M-x texinfo-every-node-update after
@c you add a new section or subsection, or after you've rearranged the
@c ---------------------------------------------------------------------
@menu
+* Copyright::
* Introduction::
* Realm Configuration Decisions::
* Building Kerberos V5::
* Files::
@end menu
-@node Introduction, Realm Configuration Decisions, Top, Top
+@node Copyright, Introduction, Top, Top
+@unnumbered Copyright
+@include copyright.texinfo
+
+@end ifinfo
+
+@node Introduction, Realm Configuration Decisions, Copyright, Top
@chapter Introduction
@menu
@end titlepage
@comment node-name, next, previous, up
-@node Top, Introduction, (dir), (dir)
+@node Top, Copyright, (dir), (dir)
@ifinfo
This file describes how to use the @value{PRODUCT} client programs.
-@include copyright.texinfo
-@end ifinfo
-
@c The master menu is updated using emacs19's M-x texinfo-all-menus-update
@c function. Don't forget to run M-x texinfo-every-node-update after
@c you add a new section or subsection, or after you've rearranged the
@c ---------------------------------------------------------------------
@menu
+* Copyright::
* Introduction::
* Kerberos V5 Tutorial::
* Kerberos V5 Reference::
* Kerberos Glossary::
@end menu
-@node Introduction, Kerberos V5 Tutorial, Top, Top
+@node Copyright, Introduction, Top, Top
+@unnumbered Copyright
+
+@include copyright.texinfo
+@end ifinfo
+
+@node Introduction, Kerberos V5 Tutorial, Copyright, Top
@chapter Introduction
@value{PRODUCT} is based on the Kerberos V5 authentication system
projects / krb5.git / commitdiff