Add pkinit_anchors default value to krb5.conf
Reindent krb5.conf to not be terrible
This commit is contained in:
parent
2eafc4d8aa
commit
6b1b652d4d
23
krb5.conf
23
krb5.conf
@ -3,22 +3,23 @@
|
|||||||
includedir /etc/krb5.conf.d/
|
includedir /etc/krb5.conf.d/
|
||||||
|
|
||||||
[logging]
|
[logging]
|
||||||
default = FILE:/var/log/krb5libs.log
|
default = FILE:/var/log/krb5libs.log
|
||||||
kdc = FILE:/var/log/krb5kdc.log
|
kdc = FILE:/var/log/krb5kdc.log
|
||||||
admin_server = FILE:/var/log/kadmind.log
|
admin_server = FILE:/var/log/kadmind.log
|
||||||
|
|
||||||
[libdefaults]
|
[libdefaults]
|
||||||
dns_lookup_realm = false
|
dns_lookup_realm = false
|
||||||
ticket_lifetime = 24h
|
ticket_lifetime = 24h
|
||||||
renew_lifetime = 7d
|
renew_lifetime = 7d
|
||||||
forwardable = true
|
forwardable = true
|
||||||
rdns = false
|
rdns = false
|
||||||
# default_realm = EXAMPLE.COM
|
pkinit_anchors = /etc/pki/tls/certs/ca-bundle.crt
|
||||||
|
# default_realm = EXAMPLE.COM
|
||||||
|
|
||||||
[realms]
|
[realms]
|
||||||
# EXAMPLE.COM = {
|
# EXAMPLE.COM = {
|
||||||
# kdc = kerberos.example.com
|
# kdc = kerberos.example.com
|
||||||
# admin_server = kerberos.example.com
|
# admin_server = kerberos.example.com
|
||||||
# }
|
# }
|
||||||
|
|
||||||
[domain_realm]
|
[domain_realm]
|
||||||
|
@ -18,7 +18,7 @@ Summary: The Kerberos network authentication system
|
|||||||
Name: krb5
|
Name: krb5
|
||||||
Version: 1.16
|
Version: 1.16
|
||||||
# for prerelease, should be e.g., 0.% {prerelease}.1% { ?dist } (without spaces)
|
# for prerelease, should be e.g., 0.% {prerelease}.1% { ?dist } (without spaces)
|
||||||
Release: 12%{?dist}
|
Release: 13%{?dist}
|
||||||
|
|
||||||
# lookaside-cached sources; two downloads and a build artifact
|
# lookaside-cached sources; two downloads and a build artifact
|
||||||
Source0: https://web.mit.edu/kerberos/dist/krb5/1.16/krb5-%{version}%{prerelease}.tar.gz
|
Source0: https://web.mit.edu/kerberos/dist/krb5/1.16/krb5-%{version}%{prerelease}.tar.gz
|
||||||
@ -724,6 +724,10 @@ exit 0
|
|||||||
%{_libdir}/libkadm5srv_mit.so.*
|
%{_libdir}/libkadm5srv_mit.so.*
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Tue Mar 20 2018 Robbie Harwood <rharwood@redhat.com> - 1.16-13
|
||||||
|
- Add pkinit_anchors default value to krb5.conf
|
||||||
|
- Reindent krb5.conf to not be terrible
|
||||||
|
|
||||||
* Tue Mar 20 2018 Robbie Harwood <rharwood@redhat.com> - 1.16-12
|
* Tue Mar 20 2018 Robbie Harwood <rharwood@redhat.com> - 1.16-12
|
||||||
- Log preauth names in trace output
|
- Log preauth names in trace output
|
||||||
- Misc bugfixes from upstream
|
- Misc bugfixes from upstream
|
||||||
|
Loading…
Reference in New Issue
Block a user