The following are examples of how to set the exauth.properties file when using a Kerberos server to perform authentication:
-
When directly specifying information about a Kerberos server (when not linking to an external authorization server)
auth.server.type=kerberos auth.group.mapping=false auth.kerberos.default_realm=EXAMPLE.COM auth.kerberos.dns_lookup_kdc=false auth.kerberos.clockskew=300 auth.kerberos.timeout=3 auth.kerberos.realm_name=RealmName auth.kerberos.RealmName.realm=EXAMPLE.COM auth.kerberos.RealmName.kdc=kerberos.example.com:88
-
When using the DNS server to look up a Kerberos server (when not linking to an external authorization server)
auth.server.type=kerberos auth.group.mapping=false auth.kerberos.default_realm=EXAMPLE.COM auth.kerberos.dns_lookup_kdc=true auth.kerberos.clockskew=300 auth.kerberos.timeout=3
-
When directly specifying information about a Kerberos server (when also linking to an external authorization server)
auth.server.type=kerberos auth.group.mapping=true auth.ocsp.enable=false auth.ocsp.responderURL= auth.kerberos.default_realm=EXAMPLE.COM auth.kerberos.dns_lookup_kdc=false auth.kerberos.clockskew=300 auth.kerberos.timeout=3 auth.kerberos.realm_name=RealmName auth.kerberos.RealmName.realm=EXAMPLE.COM auth.kerberos.RealmName.kdc=kerberos.example.com:88 auth.group.EXAMPLE.COM.protocol=ldap auth.group.EXAMPLE.COM.port=389 auth.group.EXAMPLE.COM.basedn=dc=Example,dc=com auth.group.EXAMPLE.COM.timeout=15 auth.group.EXAMPLE.COM.retry.interval=1 auth.group.EXAMPLE.COM.retry.times=20
-
When using the DNS server to look up a Kerberos server (when also linking to an external authorization server)
auth.server.type=kerberos auth.group.mapping=true auth.kerberos.default_realm=EXAMPLE.COM auth.kerberos.dns_lookup_kdc=true auth.kerberos.clockskew=300 auth.kerberos.timeout=3
-
When using a redundant configuration
auth.server.type=kerberos auth.group.mapping=false auth.kerberos.default_realm=EXAMPLE.COM auth.kerberos.dns_lookup_kdc=false auth.kerberos.clockskew=300 auth.kerberos.timeout=3 auth.kerberos.realm_name=S1 auth.kerberos.S1.realm=EXAMPLE.COM auth.kerberos.S1.kdc=kerberos.example.com:88,kerberos.example.net:88
-
When specifying multiple realm identifiers
auth.server.type=kerberos auth.group.mapping=false auth.kerberos.default_realm=EXAMPLE.COM auth.kerberos.dns_lookup_kdc=false auth.kerberos.clockskew=300 auth.kerberos.timeout=3 auth.kerberos.realm_name=S1,S2 auth.kerberos.S1.realm=EXAMPLE.COM auth.kerberos.S1.kdc=kerberos1.example.com:88,kerberos1.example.net:88 auth.kerberos.S2.realm=EXAMPLE.NET auth.kerberos.S2.kdc=kerberos2.example.com:88,kerberos2.example.net:88