1.\" $NetBSD: verify_krb5_conf.8,v 1.1.1.2 2011/04/14 14:09:27 elric Exp $ 2.\" 3.\" Copyright (c) 2000 - 2004 Kungliga Tekniska Högskolan 4.\" (Royal Institute of Technology, Stockholm, Sweden). 5.\" All rights reserved. 6.\" 7.\" Redistribution and use in source and binary forms, with or without 8.\" modification, are permitted provided that the following conditions 9.\" are met: 10.\" 11.\" 1. Redistributions of source code must retain the above copyright 12.\" notice, this list of conditions and the following disclaimer. 13.\" 14.\" 2. Redistributions in binary form must reproduce the above copyright 15.\" notice, this list of conditions and the following disclaimer in the 16.\" documentation and/or other materials provided with the distribution. 17.\" 18.\" 3. Neither the name of the Institute nor the names of its contributors 19.\" may be used to endorse or promote products derived from this software 20.\" without specific prior written permission. 21.\" 22.\" THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 23.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 24.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 25.\" ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 26.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 27.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 28.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 29.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 30.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 31.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 32.\" SUCH DAMAGE. 33.\" 34.\" Id 35.\" 36.Dd December 8, 2004 37.Dt VERIFY_KRB5_CONF 8 38.Os 39.Sh NAME 40.Nm verify_krb5_conf 41.Nd checks krb5.conf for obvious errors 42.Sh SYNOPSIS 43.Nm 44.Ar [config-file] 45.Sh DESCRIPTION 46.Nm 47reads the configuration file 48.Pa krb5.conf , 49or the file given on the command line, 50parses it, checking verifying that the syntax is not correctly wrong. 51.Pp 52If the file is syntactically correct, 53.Nm 54tries to verify that the contents of the file is of relevant nature. 55.Sh ENVIRONMENT 56.Ev KRB5_CONFIG 57points to the configuration file to read. 58.Sh FILES 59.Bl -tag -width /etc/krb5.conf -compact 60.It Pa /etc/krb5.conf 61Kerberos 5 configuration file 62.El 63.Sh DIAGNOSTICS 64Possible output from 65.Nm 66include: 67.Bl -tag -width "FpathF" 68.It "<path>: failed to parse <something> as size/time/number/boolean" 69Usually means that <something> is misspelled, or that it contains 70weird characters. The parsing done by 71.Nm 72is more strict than the one performed by libkrb5, so strings that 73work in real life might be reported as bad. 74.It "<path>: host not found (<hostname>)" 75Means that <path> is supposed to point to a host, but it can't be 76recognised as one. 77.It <path>: unknown or wrong type 78Means that <path> is either a string when it should be a list, vice 79versa, or just that 80.Nm 81is confused. 82.It <path>: unknown entry 83Means that <string> is not known by 84.Nm . 85.El 86.Sh SEE ALSO 87.Xr krb5.conf 5 88.Sh BUGS 89Since each application can put almost anything in the config file, 90it's hard to come up with a watertight verification process. Most of 91the default settings are sanity checked, but this does not mean that 92every problem is discovered, or that everything that is reported as a 93possible problem actually is one. This tool should thus be used with 94some care. 95.Pp 96It should warn about obsolete data, or bad practice, but currently 97doesn't. 98