From abf4dde3e32b884c38b3a6baf0ebe5951ba23ce4 Mon Sep 17 00:00:00 2001
From: Simo Sorce <ssorce@redhat.com>
Date: Wed, 12 Jan 2011 16:43:00 -0500
Subject: [PATCH] Restrict anonymous tgts

Fixes: https://fedorahosted.org/freeipa/ticket/432
---
 install/share/kdc.conf.template | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install/share/kdc.conf.template b/install/share/kdc.conf.template
index f8e07c77b..02f1dc111 100644
--- a/install/share/kdc.conf.template
+++ b/install/share/kdc.conf.template
@@ -1,6 +1,7 @@
 [kdcdefaults]
  kdc_ports = 88
  kdc_tcp_ports = 88
+ restrict_anonymous_to_tgt = true
 
 [realms]
  $REALM = {