freeipa/install/share/kdc.conf.template

[kdcdefaults]
 kdc_ports = 88
 kdc_tcp_ports = 88
 restrict_anonymous_to_tgt = true

[realms]
 $REALM = {
  master_key_type = aes256-cts
  max_life = 7d
  max_renewable_life = 14d
  acl_file = /var/kerberos/krb5kdc/kadm5.acl
  dict_file = /usr/share/dict/words
  default_principal_flags = +preauth
;  admin_keytab = /var/kerberos/krb5kdc/kadm5.keytab
  pkinit_identity = FILE:/var/kerberos/krb5kdc/kdc.pem
  pkinit_anchors = FILE:/var/kerberos/krb5kdc/cacert.pem
 }
Added krbinstance to configure the kerberos server Added/Modified ldif files to add the needed schemas and basic DIT, SASL configuration and ACLs Added tenmpate files foir kerberos configuration Added required packages section to README Minor mods to dsinstance Untested! 2007-06-28 18:09:54 -05:00			`[kdcdefaults]`
Make sure we listen only on the krb5 port and therefore disable krb4 support 2008-07-02 09:05:55 -05:00			`kdc_ports = 88`
Make KDC listen to TCP port as well by default 2008-12-12 19:10:04 -06:00			`kdc_tcp_ports = 88`
Restrict anonymous tgts Fixes: https://fedorahosted.org/freeipa/ticket/432 2011-01-12 15:43:00 -06:00			`restrict_anonymous_to_tgt = true`
Added krbinstance to configure the kerberos server Added/Modified ldif files to add the needed schemas and basic DIT, SASL configuration and ACLs Added tenmpate files foir kerberos configuration Added required packages section to README Minor mods to dsinstance Untested! 2007-06-28 18:09:54 -05:00
			`[realms]`
			`$REALM = {`
Use strongest keytype for master key 2010-11-01 08:33:14 -05:00			`master_key_type = aes256-cts`
Added krbinstance to configure the kerberos server Added/Modified ldif files to add the needed schemas and basic DIT, SASL configuration and ACLs Added tenmpate files foir kerberos configuration Added required packages section to README Minor mods to dsinstance Untested! 2007-06-28 18:09:54 -05:00			`max_life = 7d`
			`max_renewable_life = 14d`
			`acl_file = /var/kerberos/krb5kdc/kadm5.acl`
			`dict_file = /usr/share/dict/words`
			`default_principal_flags = +preauth`
			`; admin_keytab = /var/kerberos/krb5kdc/kadm5.keytab`
Add support for configuring KDC certs for PKINIT This patch adds support only for the selfsign case. Replica support is also still missing at this stage. 2010-10-29 15:23:21 -05:00			`pkinit_identity = FILE:/var/kerberos/krb5kdc/kdc.pem`
			`pkinit_anchors = FILE:/var/kerberos/krb5kdc/cacert.pem`
Added krbinstance to configure the kerberos server Added/Modified ldif files to add the needed schemas and basic DIT, SASL configuration and ACLs Added tenmpate files foir kerberos configuration Added required packages section to README Minor mods to dsinstance Untested! 2007-06-28 18:09:54 -05:00			`}`