2020-10-15 13:05:18 +00:00
|
|
|
[kdcdefaults]
|
|
|
|
|
kdc_ports = 88
|
|
|
|
|
kdc_tcp_ports = 88
|
|
|
|
|
spake_preauth_kdc_challenge = edwards25519
|
|
|
|
|
|
|
|
|
|
[realms]
|
|
|
|
|
EXAMPLE.COM = {
|
2022-07-11 13:48:37 +00:00
|
|
|
master_key_type = aes256-cts-hmac-sha384-192
|
2020-10-15 13:05:18 +00:00
|
|
|
acl_file = /var/kerberos/krb5kdc/kadm5.acl
|
|
|
|
|
dict_file = /usr/share/dict/words
|
|
|
|
|
default_principal_flags = +preauth
|
|
|
|
|
admin_keytab = /var/kerberos/krb5kdc/kadm5.keytab
|
2022-07-11 13:48:37 +00:00
|
|
|
supported_enctypes = aes256-cts-hmac-sha384-192:normal aes128-cts-hmac-sha256-128:normal aes256-cts-hmac-sha1-96:normal aes128-cts-hmac-sha1-96:normal camellia256-cts-cmac:normal camellia128-cts-cmac:normal arcfour-hmac-md5:normal
|
|
|
|
|
# Supported encryption types for FIPS mode:
|
|
|
|
|
#supported_enctypes = aes256-cts-hmac-sha384-192:normal aes128-cts-hmac-sha256-128:normal
|
2020-10-15 13:05:18 +00:00
|
|
|
}
|
