blob: 6e4857893186da61f25e731b35e65b011c434117 [file] [log] [blame]
[capaths]
# http://web.mit.edu/kerberos/krb5-1.5/krb5-1.5.4/doc/krb5-admin/capaths.html
ANL.GOV = {
TEST.ANL.GOV = .
PNL.GOV = ES.NET
NERSC.GOV = ES.NET
ES.NET = .
}
TEST.ANL.GOV = {
ANL.GOV = .
}
PNL.GOV = {
ANL.GOV = ES.NET
}
#NERSC.GOV = {
# ANL.GOV = ES.NET
#}
ES.NET = {
ANL.GOV = .
}
NERSC.GOV = {
ANL.GOV = ES.NET
TEST.ANL.GOV = ES.NET
TEST.ANL.GOV = ANL.GOV
PNL.GOV = ES.NET
ES.NET = .
}
# The original JDK example
TIVOLI.COM = {
IBM.COM = IBM_LDAPCENTRAL.COM MOONLITE.ORG
IBM_LDAPCENTRAL.COM = LDAPCENTRAL.NET
LDAPCENTRAL.NET = .
}
# https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Managing_Smart_Cards/Setting_Up_Cross_Realm_Authentication.html
A.EXAMPLE.COM = {
B.EXAMPLE.COM = .
C.EXAMPLE.COM = B.EXAMPLE.COM
D.EXAMPLE.COM = B.EXAMPLE.COM
D.EXAMPLE.COM = C.EXAMPLE.COM
}
# Full path
A1.COM = {
A2.COM = .
A3.COM = A2.COM
A4.COM = A2.COM
A4.COM = A3.COM
}
# Shortest path
B1.COM = {
B2.COM = .
B3.COM = B2.COM
B4.COM = B3.COM
}
# If no sRealm key, fallback to hierarchy
C1.COM = {
C3.COM = C2.COM
}
# cRealm is "."
D1.COM = {
D2.COM=D1.COM
}
# Bad cases
E1.COM = {
E2.COM = E2.COM
E3.COM = E4.COM
E3.COM = .
}
G1.COM = {
G2.COM = G3.COM
G3.COM = G2.COM
}
I1.COM = {
I2.COM = I3.COM
I3.COM = I2.COM
I4.COM = I5.COM
}
# 7019384
A9.PRAGUE.XXX.CZ = {
PRAGUE.XXX.CZ = .
ROOT.XXX.CZ = PRAGUE.XXX.CZ
SERVIS.XXX.CZ = ROOT.XXX.CZ
}