Environment variablesΒΆ
The following environment variables can be used during runtime:
- KRB5_CONFIG
- Main Kerberos configuration file. Multiple filenames can be specified, separated by a colon; all files which are present will be read. (See MIT Kerberos defaults for the default path.)
- KRB5_KDC_PROFILE
- KDC configuration file. (See MIT Kerberos defaults for the default name.)
- KRB5_KTNAME
- Default keytab file name. (See MIT Kerberos defaults for the default name.)
- KRB5_CLIENT_KTNAME
- Default client keytab file name. (See MIT Kerberos defaults for the default name.)
- KRB5CCNAME
- Default name for the credentials cache file, in the form type:residual. The type of the default cache may determine the availability of a cache collection. For instance, a default cache of type DIR causes caches within the directory to be present in the global cache collection.
- KRB5RCACHETYPE
- Default replay cache type. Defaults to dfl. A value of none disables the replay cache.
- KRB5RCACHEDIR
- Default replay cache directory. (See MIT Kerberos defaults for the default location.)
- KPROP_PORT
- kprop port to use. Defaults to 754.
- KRB5_TRACE
- Filename for trace-logging output (introduced in release 1.9). For example, env KRB5_TRACE=/dev/stdout kinit would send tracing information for kinit to /dev/stdout. Some programs may ignore this variable (particularly setuid or login system programs).