1[capaths] 2 3# http://web.mit.edu/kerberos/krb5-1.5/krb5-1.5.4/doc/krb5-admin/capaths.html 4 5ANL.GOV = { 6 TEST.ANL.GOV = . 7 PNL.GOV = ES.NET 8 NERSC.GOV = ES.NET 9 ES.NET = . 10} 11TEST.ANL.GOV = { 12 ANL.GOV = . 13} 14PNL.GOV = { 15 ANL.GOV = ES.NET 16} 17#NERSC.GOV = { 18# ANL.GOV = ES.NET 19#} 20ES.NET = { 21 ANL.GOV = . 22} 23NERSC.GOV = { 24 ANL.GOV = ES.NET 25 TEST.ANL.GOV = ES.NET 26 TEST.ANL.GOV = ANL.GOV 27 PNL.GOV = ES.NET 28 ES.NET = . 29} 30 31# The original JDK example 32 33TIVOLI.COM = { 34 IBM.COM = IBM_LDAPCENTRAL.COM MOONLITE.ORG 35 IBM_LDAPCENTRAL.COM = LDAPCENTRAL.NET 36 LDAPCENTRAL.NET = . 37} 38 39# https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Managing_Smart_Cards/Setting_Up_Cross_Realm_Authentication.html 40 41A.EXAMPLE.COM = { 42 B.EXAMPLE.COM = . 43 C.EXAMPLE.COM = B.EXAMPLE.COM 44 D.EXAMPLE.COM = B.EXAMPLE.COM 45 D.EXAMPLE.COM = C.EXAMPLE.COM 46} 47 48# Full path 49 50A1.COM = { 51 A2.COM = . 52 A3.COM = A2.COM 53 A4.COM = A2.COM 54 A4.COM = A3.COM 55} 56 57# Shortest path 58 59B1.COM = { 60 B2.COM = . 61 B3.COM = B2.COM 62 B4.COM = B3.COM 63} 64 65# If no sRealm key, fallback to hierarchy 66 67C1.COM = { 68 C3.COM = C2.COM 69} 70 71# cRealm is "." 72 73D1.COM = { 74 D2.COM=D1.COM 75} 76 77# Bad cases 78 79E1.COM = { 80 E2.COM = E2.COM 81 E3.COM = E4.COM 82 E3.COM = . 83} 84 85G1.COM = { 86 G2.COM = G3.COM 87 G3.COM = G2.COM 88} 89 90I1.COM = { 91 I2.COM = I3.COM 92 I3.COM = I2.COM 93 I4.COM = I5.COM 94} 95 96# 7019384 97 98A9.PRAGUE.XXX.CZ = { 99 PRAGUE.XXX.CZ = . 100 ROOT.XXX.CZ = PRAGUE.XXX.CZ 101 SERVIS.XXX.CZ = ROOT.XXX.CZ 102} 103