Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Service-level auth-to-local-properties is an optional list of zero or more configuration property specifications (config-type/property_name[|concatenation_scheme]) indicating which properties contain auth-to-local rule sets and how to concatenate the rules to meet the property specifications. These sets are dynamically updated using the details from the identities used when Kerberizing the cluster and concatenated as indicated.  The concatenation scheme value is optional.

 

If specified one of the following schemes must be specified:

 

  • new_lines - rules in the rule set are separated by a new line (\n)
  • new_lines_escaped - rules in the rule set are separated by a \ and a new line (\ \n)
  • spaces - rules in the rule set are separated by a whitespace character (effectively placing all rules in a single line)

...

If not specified, the default concatenation scheme is new_lines.

 

Examples

...

Service site property using the default concatenation scheme 

...