freeipa/install/share/krb5.conf.template
Martin Kosek 9677308caa Allow kernel keyring CCACHE when supported
Server and client installer should allow kernel keyring ccache when
supported.

https://fedorahosted.org/freeipa/ticket/4013
2013-12-09 12:21:22 +01:00

34 lines
627 B
Plaintext

includedir /var/lib/sss/pubconf/krb5.include.d/
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
default_realm = $REALM
dns_lookup_realm = false
dns_lookup_kdc = true
rdns = false
ticket_lifetime = 24h
forwardable = yes
$OTHER_LIBDEFAULTS
[realms]
$REALM = {
kdc = $FQDN:88
master_kdc = $FQDN:88
admin_server = $FQDN:749
default_domain = $DOMAIN
pkinit_anchors = FILE:/etc/ipa/ca.crt
}
[domain_realm]
.$DOMAIN = $REALM
$DOMAIN = $REALM
$OTHER_DOMAIN_REALM_MAPS
[dbmodules]
$REALM = {
db_library = ipadb.so
}