mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-01-01 11:47:11 -06:00
2026677635
The include of /etc/krb5.conf.d/ is required for crypto-policies to work properly https://fedorahosted.org/freeipa/ticket/5912 Reviewed-By: Martin Basti <mbasti@redhat.com> Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
37 lines
699 B
Plaintext
37 lines
699 B
Plaintext
includedir /etc/krb5.conf.d/
|
|
includedir /var/lib/sss/pubconf/krb5.include.d/
|
|
|
|
[logging]
|
|
default = FILE:/var/log/krb5libs.log
|
|
kdc = FILE:/var/log/krb5kdc.log
|
|
admin_server = FILE:/var/log/kadmind.log
|
|
|
|
[libdefaults]
|
|
default_realm = $REALM
|
|
dns_lookup_realm = false
|
|
dns_lookup_kdc = true
|
|
rdns = false
|
|
ticket_lifetime = 24h
|
|
forwardable = true
|
|
udp_preference_limit = 0
|
|
$OTHER_LIBDEFAULTS
|
|
[realms]
|
|
$REALM = {
|
|
kdc = $FQDN:88
|
|
master_kdc = $FQDN:88
|
|
admin_server = $FQDN:749
|
|
default_domain = $DOMAIN
|
|
pkinit_anchors = FILE:/etc/ipa/ca.crt
|
|
}
|
|
|
|
[domain_realm]
|
|
.$DOMAIN = $REALM
|
|
$DOMAIN = $REALM
|
|
$FQDN = $REALM
|
|
$OTHER_DOMAIN_REALM_MAPS
|
|
[dbmodules]
|
|
$REALM = {
|
|
db_library = ipadb.so
|
|
}
|
|
|