SUNW.krb5(5)

NAME | DESCRIPTION | EXAMPLES | ATTRIBUTES | SEE ALSO

NAME

SUNW.krb5, krb5– resource type implementation of the Kerberos KDC server

DESCRIPTION

SUNW.krb5 is the resource type that uses the SUNWsckrb5/etc/SUNW.krb5 file to store the resource properties required to drive the high-availability of the Kerberos server.

Standard Properties

Standard resource properties are overridden for this resource type as follows:

Cheap_probe_interval

Maximum

3600 seconds

Default

30 seconds

Tunable

Any time

Network_resources_used

Maximum

Not applicable

Default

No default

Tunable

When disabled

Port_list

---

Note –

Port 88 is associated with krb5kdc(1M) and port 749 belongs to kadmind(1M).

---

Maximum

Not applicable

Default

88/tcp, 749/tcp, and 88/udp

Tunable

At creation

Retry_count

Maximum

10

Default

2

Tunable

Any time

Retry_interval

Maximum

3600 seconds

Default

600 seconds

Tunable

Any time

Thorough_probe_interval

Maximum

3600 seconds

Default

300 seconds

Tunable

Any time

For more information about standard properties, see the r_properties(5) man page.

Extension Properties

The extension properties associated with the SUNW.krb5 resource type are as follows:

Monitor_retry_count

The maximum number of restarts by the process monitor facility (PMF) that are allowed for the fault monitor.

Data type

Integer

Default

4

Range

No range defined

Tunable

Any time

Monitor_retry_interval

The period of time in minutes during which the PMF counts restarts of the fault monitor.

Data type

Integer

Default

2 minutes

Range

No range defined

Tunable

Any time

Probe_timeout

The time-out value in seconds that the fault monitor uses to probe a Kerberos instance.

Data type

Integer

Default

90 seconds

Range

No range defined

Tunable

Any time

EXAMPLES

---

Example 1 Instantiating a Failover Kerberos Resource




This example shows how to instantiate a failover Kerberos resource.

Before you work through this example, ensure that the Sun Cluster HA for Kerberos is installed.

Instantiate a Kerberos resource named krb5-rs in a resource group named krb5-rg. The krb5-rg resource group contains at least one logical hostname resource which identifies the logical hostnames associated with the resource group.

# clresourcetype register SUNW.krb5

# clresource create -g krb5-rg -t SUNW.krb5 krb5-rs

The resource krb5-rs listens on port 88 for krb5kdc and 749 for kadmind.

---

ATTRIBUTES

See attributes(5) for descriptions of the following attributes:

ATTRIBUTE TYPE	ATTRIBUTE VALUE
Availability	SUNWkrb5

SEE ALSO

kinit(1), kadmin(1M), kadmind(1M), krb5dc(1M), pmfadm(1M), svcadm(1M), r_properties(5), Sun Cluster Data Service for Kerberos Guide for Solaris OS

NAME | DESCRIPTION | EXAMPLES | ATTRIBUTES | SEE ALSO