Filter
Top Products
Propagating the Kerberos Server
The kpropd.ini File
Chapter 9252
Sections
The kpropd.ini file stores configuration parameters required for
propagation. This file contains the following sections:
• The [default_values] section controls the various global
propagation properties. The listed values apply to all security servers
unless you override the defaults by specifying different values in the
[secsrv_name] section for a given security server.
• The [secsrv_name] section lists each security server in accordance
with your propagation hierarchy. The listed values apply only to the
specified server, where secsrv_name is the fully qualified domain
name (FQDN) of the security server. You must configure the
[secsrv_name] section for each security server in your realm in order
to identify its parent-child relationships in the propagation hierarchy
and override one or more default values for a given server. This is an
optional parameter.
Following is a brief description of the kpropd.ini file sections:
The [default_values] Section
You cannot override the interval, service_name, or primary_realm
values that you set in the [default_values] section. In other words, the
values you set for these parameters in the [default_values] section
override any other value you assign to them in the subsequent
[secsrv_name] sections.
Following are the options in the [default_values] section:
interval = n [s|m|h|d]
Specifies how often to propagate database changes to
the other security servers, where n indicates the
number of seconds, minutes, hours, or days. The
default value is 15 seconds.
NOTE Intervals less than 15 seconds may generate a lot of
network traffic during peak authentication.
key_exp=n[s|m|h|d]