3789983e89
Reviewed-by: darcy, ihse
103 lines
1.5 KiB
Plaintext
103 lines
1.5 KiB
Plaintext
[capaths]
|
|
|
|
# http://web.mit.edu/kerberos/krb5-1.5/krb5-1.5.4/doc/krb5-admin/capaths.html
|
|
|
|
ANL.GOV = {
|
|
TEST.ANL.GOV = .
|
|
PNL.GOV = ES.NET
|
|
NERSC.GOV = ES.NET
|
|
ES.NET = .
|
|
}
|
|
TEST.ANL.GOV = {
|
|
ANL.GOV = .
|
|
}
|
|
PNL.GOV = {
|
|
ANL.GOV = ES.NET
|
|
}
|
|
#NERSC.GOV = {
|
|
# ANL.GOV = ES.NET
|
|
#}
|
|
ES.NET = {
|
|
ANL.GOV = .
|
|
}
|
|
NERSC.GOV = {
|
|
ANL.GOV = ES.NET
|
|
TEST.ANL.GOV = ES.NET
|
|
TEST.ANL.GOV = ANL.GOV
|
|
PNL.GOV = ES.NET
|
|
ES.NET = .
|
|
}
|
|
|
|
# The original JDK example
|
|
|
|
TIVOLI.COM = {
|
|
IBM.COM = IBM_LDAPCENTRAL.COM MOONLITE.ORG
|
|
IBM_LDAPCENTRAL.COM = LDAPCENTRAL.NET
|
|
LDAPCENTRAL.NET = .
|
|
}
|
|
|
|
# https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Managing_Smart_Cards/Setting_Up_Cross_Realm_Authentication.html
|
|
|
|
A.EXAMPLE.COM = {
|
|
B.EXAMPLE.COM = .
|
|
C.EXAMPLE.COM = B.EXAMPLE.COM
|
|
D.EXAMPLE.COM = B.EXAMPLE.COM
|
|
D.EXAMPLE.COM = C.EXAMPLE.COM
|
|
}
|
|
|
|
# Full path
|
|
|
|
A1.COM = {
|
|
A2.COM = .
|
|
A3.COM = A2.COM
|
|
A4.COM = A2.COM
|
|
A4.COM = A3.COM
|
|
}
|
|
|
|
# Shortest path
|
|
|
|
B1.COM = {
|
|
B2.COM = .
|
|
B3.COM = B2.COM
|
|
B4.COM = B3.COM
|
|
}
|
|
|
|
# If no sRealm key, fallback to hierarchy
|
|
|
|
C1.COM = {
|
|
C3.COM = C2.COM
|
|
}
|
|
|
|
# cRealm is "."
|
|
|
|
D1.COM = {
|
|
D2.COM=D1.COM
|
|
}
|
|
|
|
# Bad cases
|
|
|
|
E1.COM = {
|
|
E2.COM = E2.COM
|
|
E3.COM = E4.COM
|
|
E3.COM = .
|
|
}
|
|
|
|
G1.COM = {
|
|
G2.COM = G3.COM
|
|
G3.COM = G2.COM
|
|
}
|
|
|
|
I1.COM = {
|
|
I2.COM = I3.COM
|
|
I3.COM = I2.COM
|
|
I4.COM = I5.COM
|
|
}
|
|
|
|
# 7019384
|
|
|
|
A9.PRAGUE.XXX.CZ = {
|
|
PRAGUE.XXX.CZ = .
|
|
ROOT.XXX.CZ = PRAGUE.XXX.CZ
|
|
SERVIS.XXX.CZ = ROOT.XXX.CZ
|
|
}
|