2007-08-29 17:07:05 -05:00
|
|
|
#kerberos base object
|
|
|
|
|
dn: cn=kerberos,$SUFFIX
|
|
|
|
|
changetype: add
|
|
|
|
|
objectClass: krbContainer
|
|
|
|
|
objectClass: top
|
|
|
|
|
cn: kerberos
|
|
|
|
|
|
2011-06-08 16:21:23 -05:00
|
|
|
#Realm base object
|
|
|
|
|
dn: cn=$REALM,cn=kerberos,$SUFFIX
|
|
|
|
|
changetype: add
|
|
|
|
|
cn: $REALM
|
|
|
|
|
objectClass: top
|
|
|
|
|
objectClass: krbrealmcontainer
|
|
|
|
|
objectClass: krbticketpolicyaux
|
|
|
|
|
krbSubTrees: $SUFFIX
|
|
|
|
|
krbSearchScope: 2
|
|
|
|
|
krbSupportedEncSaltTypes: aes256-cts:normal
|
|
|
|
|
krbSupportedEncSaltTypes: aes256-cts:special
|
|
|
|
|
krbSupportedEncSaltTypes: aes128-cts:normal
|
|
|
|
|
krbSupportedEncSaltTypes: aes128-cts:special
|
|
|
|
|
krbSupportedEncSaltTypes: des3-hmac-sha1:normal
|
|
|
|
|
krbSupportedEncSaltTypes: des3-hmac-sha1:special
|
|
|
|
|
krbSupportedEncSaltTypes: arcfour-hmac:normal
|
|
|
|
|
krbSupportedEncSaltTypes: arcfour-hmac:special
|
2013-07-12 10:28:20 -05:00
|
|
|
krbSupportedEncSaltTypes: camellia128-cts-cmac:normal
|
|
|
|
|
krbSupportedEncSaltTypes: camellia128-cts-cmac:special
|
|
|
|
|
krbSupportedEncSaltTypes: camellia256-cts-cmac:normal
|
|
|
|
|
krbSupportedEncSaltTypes: camellia256-cts-cmac:special
|
2011-06-08 16:21:23 -05:00
|
|
|
krbMaxTicketLife: 86400
|
|
|
|
|
krbMaxRenewableAge: 604800
|
|
|
|
|
krbDefaultEncSaltTypes: aes256-cts:special
|
|
|
|
|
krbDefaultEncSaltTypes: aes128-cts:special
|
|
|
|
|
|
|
|
|
|
# Default password Policy
|
|
|
|
|
dn: cn=global_policy,cn=$REALM,cn=kerberos,$SUFFIX
|
|
|
|
|
changetype: add
|
|
|
|
|
objectClass: top
|
|
|
|
|
objectClass: nsContainer
|
|
|
|
|
objectClass: krbPwdPolicy
|
|
|
|
|
krbMinPwdLife: 3600
|
|
|
|
|
krbPwdMinDiffChars: 0
|
|
|
|
|
krbPwdMinLength: 8
|
|
|
|
|
krbPwdHistoryLength: 0
|
|
|
|
|
krbMaxPwdLife: 7776000
|
|
|
|
|
krbPwdMaxFailure: 6
|
|
|
|
|
krbPwdFailureCountInterval: 60
|
|
|
|
|
krbPwdLockoutDuration: 600
|
|
|
|
|
|
