In the [realms] section, the following Kerberos V4 tags may be used:
- Identifies the default domain for hosts in this realm. This is needed
for translating V4 principal names (which do not contain a domain name)
to V5 principal names. The default is your Kerberos realm name,
converted to lower case.
- This subsection allows the administrator to configure exceptions to the
default_domain mapping rule. It contains V4 instances (tag name) which
should be translated to some specific hostname (tag value) as the second
component in a Kerberos V5 principal name.
- This relation allows the administrator to configure a different
realm name to be used when converting V5 principals to V4
ones. This should only be used when running separate V4 and V5
realms, with some external means of password sychronization
between the realms.