warn.conf(4)

NAME

     warn.conf - Kerberos warning configuration file

SYNOPSIS

     /etc/krb5/warn.conf

DESCRIPTION

     The warn.conf file contains configuration information speci-
     fying  how  users  will  be  warned by the ktkt_warnd daemon
     about ticket expiration on  a  Kerberos  client.  Credential
     expiration  warnings  are  sent,  by  means  of  syslog,  to
     auth.notice.  All  other  warning  messages  are   sent   to
     daemon.notice.

     Each Kerberos client host must  have  a  warn.conf  file  in
     order  for  users on that host to get Kerberos warnings from
     the client. Entries in the warn.conf file must have the fol-
     lowing format:

     principal syslog | terminal | mail time [email_address]

     principal
           Specifies the principal name to be warned. The  aster-
           isk  (*)  wildcard  can  be  used to specify groups of
           principals.

     syslog
           Sends the warnings to the system's  syslog.  Depending
           on the /etc/syslog.conf file, syslog entries are writ-
           ten to the /var/adm/messages file and/or displayed  on
           the terminal.

     terminal
           Sends the warnings to display on the terminal.

     mail  Sends the warnings as email to the  address  specified
           by email_address.

     time  Specifies how much time before the TGT expires when  a
           warning  should  be  sent.  The  default time value is
           seconds, but you can specify h (hours) and m (minutes)
           after the number to specify other time values.

     email_address
           Specifies the email address at which to send the warn-
           ings.  This field must be specified only with the mail
           field.

EXAMPLES

     Example 1: Specifying warnings

     The following warn.conf entry

     * syslog 5m

     specifies that warnings will be  sent  to  the  syslog  five
     minutes before the expiration of the TGT for all principals.
     The form of the message is:

     jdb@ACME.COM: your kerberos credentials expire in 5 minutes

FILES

     /usr/lib/krb5/ktkt_warnd
           Kerberos warning daemon

SEE ALSO

     ktkt_warnd(1M), syslog.conf(4), SEAM(5)