Configuring the Kerberos Server With C-Tree Backend
Configuration Files for the Kerberos Server
Chapter 568
To create comments, use the hash sign (#). Any characters after a # sign
are ignored. Blank lines and any leading or trailing white spaces in a
line are also ignored.
To identify multiple hosts that belong to the same realm in a single entry,
use one of the wildcard characters described in Table 5-2.
Table 5-2 Wildcard Characters
Wildcard Character Description
. (period) Begin the name field with a period
followed by a domain name to designate
that all hosts in the specified domain
belong to the indicated realm.
For example, to indicate that the hosts
sales.bambi.com and mrkt.bambi.com
belong to REALM1, add the following entry
in your krb.realms file:
.bambi.com REALM1
* (asterisk) Begin the name field with an asterisk (*)
followed by a parent domain name to
designate all hosts in subdomains that
belong to the indicated realm.
For example, to indicate that hosts
bob.sales.bambi.com and
man.john.sales.bambi.com belong to
REALM2, add the following entry in your
krb.realms file:
*.sales.com REALM2
