Keywords › REALM(KERBDFLT) Keyword—Define Local Realm

REALM(KERBDFLT) Keyword—Define Local Realm

Valid on z/OS.

Use the REALM(KERBDFLT) keyword to name the REALM associated with the local TCP/IP node. The definition of the KERBDFLT REALM is required in order to initiate the IBM Secure Way Server Network Authentication Service. The parameters of the REALM must correspond to those of the USS configuration file described by the IBM Administration Guide for this service.

KERBDFLT is known as the “local” realm.

This keyword has the following format:

TSS ADDTO(SDT) REALM(KERBDFLT)
             REALMNAME(local—realm—URL)       
             ENCRYPT('[DES|NODES]
                     [DES3|NODES3]
                     [DESD|NODESD]
                     [AES128|NOAES128]
                     [AES256|NOAES256])
             KERBPASS(password)
             CHKADDRS

This keyword is used with:

• The commands ADDTO, REMOVE, REPLACE, and LIST
• The SDT Record exclusively
• MISC3(SDT) authority to ADDTO or REMOVE records or REPLACE fields in the SDT
• MISC8(LISTSDT) authority to list realms in the SDT

Example: REALM(KERBDFLT) Keyword

This example creates the local realm associated with the URL HYPOTHETICAL.CA..COM enabling all encryption types and a password of “THET1CL”

TSS ADD(SDT) REALM(KERBDFLT)
             REALMNAME(HYPOTHETICAL.CA.COM)
             ENCRYPT('DES DES3 DESD')
             KERBPASS(THET1CAL)
             CHKADDRS