Attachment 1477660 Details for Bug 1619733 – krb5.conf server1

krb5.conf server1

krb5.conf (text/plain), 1.32 KB, created by Richard Berg on 2018-08-21 18:06:27 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Richard Berg

Created: 2018-08-21 18:06:27 UTC

Size: 1.32 KB

patch

obsolete

># To opt out of the system crypto-policies configuration of krb5, remove the
># symlink at /etc/krb5.conf.d/crypto-policies which will not be recreated.
>includedir /etc/krb5.conf.d/
>includedir /var/lib/sss/pubconf/krb5.include.d/
>
>[logging]
>    default = FILE:/var/log/krb5libs.log
>    kdc = FILE:/var/log/krb5kdc.log
>    admin_server = FILE:/var/log/kadmind.log
>
>[libdefaults]
>    dns_lookup_realm = false
>    ticket_lifetime = 24h
>    renew_lifetime = 7d
>    forwardable = true
>    rdns = false
>    pkinit_anchors = /etc/pki/tls/certs/ca-bundle.crt
>    spake_preauth_groups = edwards25519
>    default_ccache_name = KEYRING:persistent:%{uid}
>
>    default_realm = EXAMPLE.COM
>    dns_lookup_kdc = true
>    udp_preference_limit = 0
>
>[realms]
> EXAMPLE.COM = {
>     kdc = server1.example.com:88
>     master_kdc = server1.example.com:88
>     admin_server = server1.example.com:749
>     default_domain = example.com
>     pkinit_anchors = FILE:/var/lib/ipa-client/pki/kdc-ca-bundle.pem
>     pkinit_pool = FILE:/var/lib/ipa-client/pki/ca-bundle.pem
> }
>
>[domain_realm]
> .example.com = EXAMPLE.COM
> example.com = EXAMPLE.COM
> server1.example.com = EXAMPLE.COM
>
>[dbmodules]
># EXAMPLE.COM = {
>#      db_library = ipadb.so
># }
>
>[plugins]
> certauth = {
>     module = ipakdb:kdb/ipadb.so
>     enable_only = ipakdb
> }
>  EXAMPLE.COM = {
>    db_library = ipadb.so
>  }

Actions: View

Attachments on bug 1619733: 1477660