SUNW.krb5

, krb5

- resource type implementation of the Kerberos KDC server

Description

SUNW.krb5 is the resource type that uses the SUNWsckrb5/etc/SUNW.krb5 file to store the resource properties required to drive the high-availability of the Kerberos server.

Standard Properties

Standard resource properties are overridden for this resource type as follows:

Cheap_probe_interval

Maximum

3600 seconds

Minimum

10 seconds

Default

30 seconds

Tunable

Any time

Network_resources_used (string array)

A list of logical-hostname or shared-address network resources upon which this resource has a dependency. This list contains all network-address resources that appear in the properties Resource_dependencies, Resource_dependencies_weak, Resource_dependencies_restart, or Resource_dependencies_offline_restart.

This property is updated automatically by the RGM, based on the setting of the resource-dependencies properties. You do not set this property directly. Instead, use the Resource_dependencies property.

Category

Conditional/Optional

Default

The empty list

Tunable

When disabled

Resource_dependencies (string array)

Specifies a list of resources upon which a resource depends. This list includes any logical-hostname or shared-address network resources that are used by a resource. The default value for this property is null.

You can specify one or more resource names. Each network resource can contain one or more logical host names. See the clreslogicalhostname(1CL) and clressharedaddress(1CL) man pages for more information.

You can specify an alternate kind of dependency by using the Resource_dependencies_weak, Resource_dependencies_restart, or Resource_dependencies_offline_restart property instead of the Resource_dependencies property. For more information, see the r_properties(5) man page.

Category

Optional

Default

The empty list

Tunable

Any time

Port_list

---

Note - Port 88 is associated with krb5kdc(1M) and port 749 belongs to kadmind(1M).

---

Maximum

Not applicable

Default

88/tcp, 749/tcp, and 88/udp

Tunable

At creation

Retry_count

Maximum

10

Default

2

Tunable

Any time

Retry_interval

Maximum

3600 seconds

Default

1570 seconds

Tunable

Any time

Thorough_probe_interval

Maximum

3600 seconds

Default

300 seconds

Tunable

Any time

For more information about standard properties, see the r_properties(5) man page.

Extension Properties

The extension properties associated with the SUNW.krb5 resource type are as follows:

Monitor_retry_count

The maximum number of restarts by the process monitor facility (PMF) that are allowed for the fault monitor.

Data type

Integer

Default

4

Range

No range defined

Tunable

Any time

Monitor_retry_interval

The period of time in minutes during which the PMF counts restarts of the fault monitor.

Data type

Integer

Default

2 minutes

Range

No range defined

Tunable

Any time

Probe_timeout

The time-out value in seconds that the fault monitor uses to probe a Kerberos instance.

Data type

Integer

Minimum

2

Default

90 seconds

Range

No range defined

Tunable

Any time

Examples

Example 1 Instantiating a Failover Kerberos Resource

This example shows how to instantiate a failover Kerberos resource.

Before you work through this example, ensure that the Oracle Solaris Cluster HA for Kerberos is installed.

Instantiate a Kerberos resource named krb5-rs in a resource group named krb5-rg. The krb5-rg resource group contains at least one logical hostname resource which identifies the logical hostnames associated with the resource group.

# clresourcetype register SUNW.krb5

# clresource create -g krb5-rg -t SUNW.krb5 krb5-rs

The resource krb5-rs listens on port 88 for krb5kdc and 749 for kadmind.

Attributes

See attributes(5) for descriptions of the following attributes:

See Also

kinit(1), kadmin(1M), kadmind(1M), krb5kdc(1M), scrgadm(1M), svcadm(1M), r_properties(5),