37 lines
915 B
Plaintext
37 lines
915 B
Plaintext
|
# To opt out of the system crypto-policies configuration of krb5, remove the
|
||
|
|
# symlink at /etc/krb5.conf.d/crypto-policies which will not be recreated.
|
||
|
|
includedir /etc/krb5.conf.d/
|
||
|
|
|
||
|
|
[logging]
|
||
|
|
default = FILE:/var/log/krb5libs.log
|
||
|
|
kdc = FILE:/var/log/krb5kdc.log
|
||
|
|
admin_server = FILE:/var/log/kadmind.log
|
||
|
|
|
||
|
|
[libdefaults]
|
||
|
|
default_realm = ${krb5REALM1}
|
||
|
|
dns_lookup_realm = false
|
||
|
|
ticket_lifetime = 24h
|
||
|
|
renew_lifetime = 7d
|
||
|
|
forwardable = true
|
||
|
|
rdns = false
|
||
|
|
default_ccache_name = KEYRING:persistent:%{uid}
|
||
|
|
|
||
|
|
[realms]
|
||
|
|
${krb5REALM1} = {
|
||
|
|
kdc = localhost.localdomain
|
||
|
|
admin_server = localhost.localdomain
|
||
|
|
}
|
||
|
|
${krb5REALM2} = {
|
||
|
|
kdc = localhost.localdomain
|
||
|
|
admin_server = localhost.localdomain
|
||
|
|
}
|
||
|
|
|
||
|
|
[domain_realm]
|
||
|
|
${krb5HostName} = ${krb5REALM1}
|
||
|
|
${krb5HostName} = ${krb5REALM2}
|
||
|
|
|
||
|
|
[capaths]
|
||
|
|
${krb5REALM1} = {
|
||
|
|
${krb5REALM2} = .
|
||
|
|
}
|