KERBPASS Keyword—REALM Record Password

Keywords › KERBPASS Keyword—REALM Record Password

KERBPASS Keyword—REALM Record Password

Valid on z/OS.

Use the KERBPASS keyword to specify the value of the REALM record password and is applicable to all REALM (local and foreign) SDT definitions.

A KERBPASS password is required for the realm to grant ticket‑granting‑tickets. This password must be associated with the definition of an inter‑realm trust relationship, or the definition is incomplete.

This keyword has the following format: ‑ Local Realm

TSS ADDTO(SDT) REALM(KERBDFLT)
               REALMNAME('kerberos‑realm‑name')
               MINTKTLF(min‑ticket‑life)
               MAXTKTLF(max‑ticket‑life)
               DEFTKTLF(default‑ticket‑life) 
               KERBPASS(kerberos‑password)
               CHKADDRS

This keyword has the following format: ‑ Foreign Realm

TSS ADDTO(SDT) REALM(realm‑label)
               REALMNAME('fully‑qualified‑name')
               KERBPASS(password)

kerberos‑password

Specifies the value of the Kerberos password in the local realm.

Maximum length: 8 characters

password

Specifies the value of the Kerberos password in the foreign realm.

Maximum length: 8 characters

You can use any character, but do not use any of the variant characters to avoid problems with different code pages.

Use the single quotes in the following circumstances:

If parentheses, commas, blanks, or semicolons are entered as part of the name, the character string must be enclosed in single quotes.
If a single quote is part of the name and the entire character string is enclosed in single quotes, use two single quotes together to represent each single quote in the string.
If the first character of the name is a single quote, enter the string within single quotes with two single quotes entered for the single quote.

Both uppercase and lowercase characters are accepted and maintained in the case entered.

This keyword is used with:

The commands ADDTO, DELETE, REMOVE, REPLACE, and LIST
The ACID types User, DCA, VCA, ZCA, LSCA, and SCA
MISC3(SDT) authority to ADDTO or REMOVE records or fields in the SDT
MISC8(LISTSDT) authority to list KERBNAME in the SDT

Examples: KERBPASS keyword

This example indicates that a KERBPASS of children was used in the default REALM SDT record:

TSS ADDTO(SDT) REALM(KERBDFLT)
               REALMNAME(LOCAL.CA.COM)
               MINTKTLF(30)
               MAXTKTLF(86400)
               DEFTKTLF(36000)
               KERBPASS(CHILDREN)
               CHKADDRS

This example indicates that a KERBPASS XXXXXXXX was used for a foreign realm SDT record: (must be the same as local KERBPASS)

TSS ADDTO(SDT) REALM(KERBFOR1)
               REALMNAME('LOCAL.CA.COM/KRBTGT/FOREIGN.SERVER_1')
               KERBPASS(XXXXXXXX)