Environment variables — MIT Kerberos Documentation

# MIT Kerberos Documentation

Contents | previous | next | index | Search | feedback

# Environment variables

The following environment variables can be used during runtime:

KRB5_CONFIG
  Main Kerberos configuration file. Multiple filenames can be specified, separated by a colon; all files which are present will be read. (See MIT Kerberos defaults for the default path.)
KRB5_KDC_PROFILE
  KDC configuration file. (See MIT Kerberos defaults for the default name.)
KRB5_KTNAME
  Default keytab file name. (See MIT Kerberos defaults for the default name.)
KRB5_CLIENT_KTNAME
  Default client keytab file name. (See MIT Kerberos defaults for the default name.)
KRB5CCNAME
  Default name for the credentials cache file, in the form type:residual. The type of the default cache may determine the availability of a cache collection. For instance, a default cache of type `DIR` causes caches within the directory to be present in the global cache collection.
KRB5RCACHETYPE
  Default replay cache type. Defaults to `dfl`. A value of `none` disables the replay cache.
KRB5RCACHEDIR
  Default replay cache directory. (See MIT Kerberos defaults for the default location.)
KPROP_PORT
  kprop port to use. Defaults to 754.
KRB5_TRACE
  Filename for trace-logging output (introduced in release 1.9). For example, `env KRB5_TRACE=/dev/stdout kinit` would send tracing information for kinit to `/dev/stdout`. Some programs may ignore this variable (particularly setuid or login system programs).