>> # The following krb5.conf variables are only for MIT Kerberos.

> The above is a comment.

I have not found a place describing this, but I did not serach too
long.

> It is perfectly valid for a '#' to be present in a value string.

> A value string is all of the contents to the right of the equal sign
> until the end of line.

To the right of the equal sign and any following whitespace. So it
seems one can have whitespace inside the value but no value which
starts with whitespace. According to my tests these two values are the
file "/tmp/foo bar #"

        default_cc_name =      /tmp/foo bar #baz
or
        default_cc_name =/tmp/foo bar #baz

give
$ klist
klist: No ticket file: /tmp/foo bar #baz

So that probably means that both 

>  STRINGs consists of one or more non-whitespace characters.

from Heimdal man krb5.conf and kinits handing of

        renew_lifetime = 3 days

are wrong?

Probably the documentation, kinit and verify_krb5_conf should agree
about the format.

Harald.

Reply via email to