303-300 · Question #40
Which of the following sections are allowed within the Kerberos configuration file krb5.conf? (Choose THREE correct answers.)
The correct answer is A. [plugins] D. [capaths] E. [realms]. [plugins], [capaths], and [realms] are all valid, documented sections in the krb5.conf Kerberos configuration file. [realms] defines Kerberos realm settings (KDC addresses, admin servers), [capaths] specifies authentication paths for cross-realm authentication, and [plugins]…
Question
Which of the following sections are allowed within the Kerberos configuration file krb5.conf? (Choose THREE correct answers.)
Options
- A[plugins]
- B[crypto]
- C[domain]
- D[capaths]
- E[realms]
How the community answered
(17 responses)- A94% (16)
- C6% (1)
Explanation
[plugins], [capaths], and [realms] are all valid, documented sections in the krb5.conf Kerberos configuration file. [realms] defines Kerberos realm settings (KDC addresses, admin servers), [capaths] specifies authentication paths for cross-realm authentication, and [plugins] configures pluggable module interfaces introduced in MIT Kerberos 1.9+.
[crypto] is not a valid krb5.conf section - cryptographic settings are configured under [libdefaults] using directives like default_tkt_enctypes. [domain] is also invalid; domain-to-realm mappings belong in the [domain_realm] section (note the underscore).
Memory tip: The valid sections follow the pattern of real Kerberos concepts - Realms, CApaths (Certificate Authority paths for cross-realm), and Plugins. Watch out for [domain] vs [domain_realm] - the underscore is required, and missing it is a classic trap.
Topics
Community Discussion
No community discussion yet for this question.