kerberos.realm.query

Sent on kerberos.realm changes.

Type: object

ADDED

KerberosRealmAddedEvent

Type: object
No Additional Properties

id Required

Id

Type: integer

fields Required

KerberosRealmEntry

Type: object
No Additional Properties

id Required

Id

Type: integer

Unique identifier for the Kerberos realm configuration.

realm Required

Realm

Type: string

Kerberos realm name. This is external to TrueNAS and is case-sensitive. The general convention for kerberos realms is that they are upper-case.

Must be at least 1 characters long

primary_kdc

Primary Kdc

Default: null

The master Kerberos domain controller for this realm. TrueNAS uses this as a fallback if it cannot get credentials because of an invalid password. This can help in environments where the domain uses a hub-and-spoke topology. Use this setting to reduce credential errors after TrueNAS automatically changes its machine password.

Any of

• Option 1
• Option 2

Type: string

Must be at least 1 characters long

Type: null

kdc

Kdc

Type: array of string Default: []

List of kerberos domain controllers. If the list is empty then the kerberos libraries will use DNS to look up KDCs. In some situations this is undesirable as kerberos libraries are, for intance, not active directory site aware and so may be suboptimal.

No Additional Items

Each item of this array must be:

Type: string

Must be at least 1 characters long

admin_server

Admin Server

Type: array of string Default: []

List of kerberos admin servers. If the list is empty then the kerberos libraries will use DNS to look them up.

No Additional Items

Each item of this array must be:

Type: string

Must be at least 1 characters long

kpasswd_server

Kpasswd Server

Type: array of string Default: []

List of kerberos kpasswd servers. If the list is empty then DNS will be used to look them up if needed.

No Additional Items

Each item of this array must be:

Type: string

Must be at least 1 characters long

CHANGED

KerberosRealmChangedEvent

Type: object
No Additional Properties

id Required

Id

Type: integer

fields Required

KerberosRealmEntry

Type: object
No Additional Properties

id Required

Id

Type: integer

Unique identifier for the Kerberos realm configuration.

realm Required

Realm

Type: string

Kerberos realm name. This is external to TrueNAS and is case-sensitive. The general convention for kerberos realms is that they are upper-case.

Must be at least 1 characters long

primary_kdc

Primary Kdc

Default: null

The master Kerberos domain controller for this realm. TrueNAS uses this as a fallback if it cannot get credentials because of an invalid password. This can help in environments where the domain uses a hub-and-spoke topology. Use this setting to reduce credential errors after TrueNAS automatically changes its machine password.

Any of

• Option 1
• Option 2

Type: string

Must be at least 1 characters long

Type: null

kdc

Kdc

Type: array of string Default: []

List of kerberos domain controllers. If the list is empty then the kerberos libraries will use DNS to look up KDCs. In some situations this is undesirable as kerberos libraries are, for intance, not active directory site aware and so may be suboptimal.

No Additional Items

Each item of this array must be:

Type: string

Must be at least 1 characters long

admin_server

Admin Server

Type: array of string Default: []

List of kerberos admin servers. If the list is empty then the kerberos libraries will use DNS to look them up.

No Additional Items

Each item of this array must be:

Type: string

Must be at least 1 characters long

kpasswd_server

Kpasswd Server

Type: array of string Default: []

List of kerberos kpasswd servers. If the list is empty then DNS will be used to look them up if needed.

No Additional Items

Each item of this array must be:

Type: string

Must be at least 1 characters long

REMOVED

KerberosRealmRemovedEvent

Type: object
No Additional Properties

id Required

Id

Type: integer

Required roles: DIRECTORY_SERVICE_READ