mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
820479471e
Added/Modified ldif files to add the needed schemas and basic DIT, SASL configuration and ACLs Added tenmpate files foir kerberos configuration Added required packages section to README Minor mods to dsinstance Untested!
36 lines
745 B
Plaintext
36 lines
745 B
Plaintext
[logging]
|
|
default = FILE:/var/log/krb5libs.log
|
|
kdc = FILE:/var/log/krb5kdc.log
|
|
admin_server = FILE:/var/log/kadmind.log
|
|
|
|
[libdefaults]
|
|
default_realm = $REALM
|
|
dns_lookup_realm = true
|
|
dns_lookup_kdc = true
|
|
ticket_lifetime = 24h
|
|
forwardable = yes
|
|
|
|
[domain_realm]
|
|
.$DOMAIN = $REALM
|
|
$DOMAIN = $REALM
|
|
|
|
[appdefaults]
|
|
pam = {
|
|
debug = false
|
|
ticket_lifetime = 36000
|
|
renew_lifetime = 36000
|
|
forwardable = true
|
|
krb4_convert = false
|
|
}
|
|
|
|
[dbmodules]
|
|
$REALM = {
|
|
db_library = kldap
|
|
ldap_servers = ldap://127.0.0.1/
|
|
ldap_kerberos_container_dn = cn=kerberos,$SUFFIX
|
|
ldap_kdc_dn = uid=kdc,cn=kerberos,$SUFFIX
|
|
; ldap_kadmind_dn = cn=Directory Manager
|
|
ldap_service_password_file = /var/kerberos/krb5kdc/ldappwd
|
|
}
|
|
|