warn.conf(4) File Formats warn.conf(4) NAME warn.conf - Kerberos warning configuration file SYNOPSIS /etc/krb5/warn.conf DESCRIPTION The warn.conf file contains configuration information specifying how users will be warned by the ktkt_warnd daemon about ticket expiration on a Kerberos client. Credential expiration warnings are sent, by means of syslog, to auth.notice. All other warning messages are sent to daemon.notice. Each Kerberos client host must have a warn.conf file in order for users on that host to get Kerberos warnings from the client. Entries in the warn.conf file must have the following format: principal syslog | terminal | mail time [email_address] principal Specifies the principal name to be warned. The asterisk (*) wildcard can be used to specify groups of principals. syslog Sends the warnings to the system's syslog. Depending on the /etc/syslog.conf file, syslog entries are written to the /var/adm/messages file and/or displayed on the terminal. terminal Sends the warnings to display on the terminal. mail Sends the warnings as email to the address specified by email_address. time Specifies how much time before the TGT expires when a warning should be sent. The default time value is seconds, but you can specify h (hours) and m (minutes) after the number to specify other time values. email_address Specifies the email address at which to send the warnings. This field must be specified only with the mail field. EXAMPLES Example 1: Specifying warnings The following warn.conf entry * syslog 5m specifies that warnings will be sent to the syslog five minutes before the expiration of the TGT for all principals. The form of the mes- sage is: jdb@ACME.COM: your kerberos credentials expire in 5 minutes FILES /usr/lib/krb5/ktkt_warnd Kerberos warning daemon SEE ALSO ktkt_warnd(1M), syslog.conf(4), SEAM(5) SunOS 5.10 22 Apr 2003 warn.conf(4)