Forum Discussion
CirrusDoes APM setup also still use krb5.conf settings?
We have a setup that has grown from ACA through APM using Kerberos, and in doing some cleanup, I've noticed old settings in the krb5.conf file. Question is, now that we are configured through APM, do the old manual settings in krb5.conf still affect our kerberos configuration?
Tom
For AD Auth: no , a sandbox conf file is used instead. For AD Query: no , a sandbox conf file is used instead. For Kerberos S4U (SSO): yes For Kerberos Front-end (AAA): yes
Note that krb5.conf is not synced across blades for chassis systems or HA and may be overwritten on upgrades in some cases. So please don't modify it unless necessary.
2 Replies
For AD Auth: no , a sandbox conf file is used instead. For AD Query: no , a sandbox conf file is used instead. For Kerberos S4U (SSO): yes For Kerberos Front-end (AAA): yes
Note that krb5.conf is not synced across blades for chassis systems or HA and may be overwritten on upgrades in some cases. So please don't modify it unless necessary.
TLL_91858Not what I expected for an answer, but interesting. Mine was modified many versions ago when using ACA for Kerberos, and I now see it is still affecting my setup under APM. Follow-up: Is there a way to get a 'virgin' krb5.conf?
