conf/kerberos/principals
The conf/kerberos/principals directory contains configuration files for Kerberos principals the traffic manager can use to perform Kerberos operations. The name of a file is the name of the Kerberos principal it defines. Kerberos principals can be configured under the Catalogs > Kerberos Principals section of the administrative interface or by using functions under the Catalog.Kerberos.Principals section of the SOAP API and CLI.
Key | Description |
|---|---|
kdcs | A list of <hostname/ip>:<port> pairs for Kerberos key distribution center (KDC) services to be explicitly used for the realm of the principal. If no KDCs are explicitly configured, DNS will be used to discover the KDC(s) to use. Requires: krb5conf is set to "" Value type: list Default value: <none> |
keytab | The name of the Kerberos keytab file containing suitable credentials to authenticate as the specified Kerberos principal. Value type: string Default value: <none> |
krb5conf | The name of an optional Kerberos configuration file (krb5.conf). Value type: string Default value: <none> |
realm | The Kerberos realm where the principal belongs. Value type: string Default value: <none> |
service | The service name part of the Kerberos principal name the traffic manager should use to authenticate itself. Value type: string Default value: <none> |