6a46621b1a
but matches the man page better
- take port numbers off of the server names; i'm assuming that it's rare
for them to need specifying because i assume the defaults are used more
often than not
23 lines
449 B
Plaintext
23 lines
449 B
Plaintext
[logging]
|
|
default = FILE:/var/log/krb5libs.log
|
|
kdc = FILE:/var/log/krb5kdc.log
|
|
admin_server = FILE:/var/log/kadmind.log
|
|
|
|
[libdefaults]
|
|
default_realm = EXAMPLE.COM
|
|
dns_lookup_realm = false
|
|
dns_lookup_kdc = false
|
|
ticket_lifetime = 24h
|
|
renew_lifetime = 7d
|
|
forwardable = true
|
|
|
|
[realms]
|
|
EXAMPLE.COM = {
|
|
kdc = kerberos.example.com
|
|
admin_server = kerberos.example.com
|
|
}
|
|
|
|
[domain_realm]
|
|
.example.com = EXAMPLE.COM
|
|
example.com = EXAMPLE.COM
|