1[capaths]
2
3# http://web.mit.edu/kerberos/krb5-1.5/krb5-1.5.4/doc/krb5-admin/capaths.html
4
5ANL.GOV = {
6    TEST.ANL.GOV = .
7    PNL.GOV = ES.NET
8    NERSC.GOV = ES.NET
9    ES.NET = .
10}
11TEST.ANL.GOV = {
12    ANL.GOV = .
13}
14PNL.GOV = {
15    ANL.GOV = ES.NET
16}
17#NERSC.GOV = {
18#    ANL.GOV = ES.NET
19#}
20ES.NET = {
21    ANL.GOV = .
22}
23NERSC.GOV = {
24    ANL.GOV = ES.NET
25    TEST.ANL.GOV = ES.NET
26    TEST.ANL.GOV = ANL.GOV
27    PNL.GOV = ES.NET
28    ES.NET = .
29}
30
31# The original JDK example
32
33TIVOLI.COM = {
34    IBM.COM = IBM_LDAPCENTRAL.COM MOONLITE.ORG
35    IBM_LDAPCENTRAL.COM = LDAPCENTRAL.NET
36    LDAPCENTRAL.NET = .
37}
38
39# https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Managing_Smart_Cards/Setting_Up_Cross_Realm_Authentication.html
40
41A.EXAMPLE.COM = {
42    B.EXAMPLE.COM = .
43    C.EXAMPLE.COM = B.EXAMPLE.COM
44    D.EXAMPLE.COM = B.EXAMPLE.COM
45    D.EXAMPLE.COM = C.EXAMPLE.COM
46}
47
48# Full path
49
50A1.COM = {
51    A2.COM = .
52    A3.COM = A2.COM
53    A4.COM = A2.COM
54    A4.COM = A3.COM
55}
56
57# Shortest path
58
59B1.COM = {
60    B2.COM = .
61    B3.COM = B2.COM
62    B4.COM = B3.COM
63}
64
65# If no sRealm key, fallback to hierarchy
66
67C1.COM = {
68    C3.COM = C2.COM
69}
70
71# cRealm is "."
72
73D1.COM = {
74    D2.COM=D1.COM
75}
76
77# Bad cases
78
79E1.COM = {
80    E2.COM = E2.COM
81    E3.COM = E4.COM
82    E3.COM = .
83}
84
85G1.COM = {
86    G2.COM = G3.COM
87    G3.COM = G2.COM
88}
89
90I1.COM = {
91    I2.COM = I3.COM
92    I3.COM = I2.COM
93    I4.COM = I5.COM
94}
95
96# 7019384
97
98A9.PRAGUE.XXX.CZ = {
99    PRAGUE.XXX.CZ = .
100    ROOT.XXX.CZ = PRAGUE.XXX.CZ
101    SERVIS.XXX.CZ = ROOT.XXX.CZ
102}
103