diff --git a/client/ipa-client-install b/client/ipa-client-install
index 48c325f53..f42d87755 100755
--- a/client/ipa-client-install
+++ b/client/ipa-client-install
@@ -1069,7 +1069,7 @@ def configure_krb5_conf(cli_realm, cli_domain, cli_server, cli_kdc, dnsok,
         libopts.append({'name':'dns_lookup_kdc', 'type':'option', 'value':'true'})
     libopts.append({'name':'rdns', 'type':'option', 'value':'false'})
     libopts.append({'name':'ticket_lifetime', 'type':'option', 'value':'24h'})
-    libopts.append({'name':'forwardable', 'type':'option', 'value':'yes'})
+    libopts.append({'name':'forwardable', 'type':'option', 'value':'true'})
     libopts.append({'name':'udp_preference_limit', 'type':'option', 'value':'0'})
 
     # Configure KEYRING CCACHE if supported
diff --git a/install/share/krb5.conf.template b/install/share/krb5.conf.template
index 6cb5ee347..92431d3fd 100644
--- a/install/share/krb5.conf.template
+++ b/install/share/krb5.conf.template
@@ -11,7 +11,7 @@ includedir /var/lib/sss/pubconf/krb5.include.d/
  dns_lookup_kdc = true
  rdns = false
  ticket_lifetime = 24h
- forwardable = yes
+ forwardable = true
  udp_preference_limit = 0
 $OTHER_LIBDEFAULTS
 [realms]
diff --git a/install/tools/ipa-replica-conncheck b/install/tools/ipa-replica-conncheck
index ba7538ac7..d88291e55 100755
--- a/install/tools/ipa-replica-conncheck
+++ b/install/tools/ipa-replica-conncheck
@@ -249,7 +249,7 @@ def configure_krb5_conf(realm, kdc, filename):
     libdefaults.append({'name':'dns_lookup_kdc', 'type':'option', 'value':'true'})
     libdefaults.append({'name':'rdns', 'type':'option', 'value':'false'})
     libdefaults.append({'name':'ticket_lifetime', 'type':'option', 'value':'24h'})
-    libdefaults.append({'name':'forwardable', 'type':'option', 'value':'yes'})
+    libdefaults.append({'name':'forwardable', 'type':'option', 'value':'true'})
     libdefaults.append({'name':'udp_preference_limit', 'type':'option', 'value':'0'})
 
     opts.append({'name':'libdefaults', 'type':'section', 'value': libdefaults})