You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
30 lines
828 B
30 lines
828 B
# To opt out of the system crypto-policies configuration of krb5, remove the |
|
# symlink at /etc/krb5.conf.d/crypto-policies which will not be recreated. |
|
includedir /etc/krb5.conf.d/ |
|
|
|
[logging] |
|
default = FILE:/var/log/krb5libs.log |
|
kdc = FILE:/var/log/krb5kdc.log |
|
admin_server = FILE:/var/log/kadmind.log |
|
|
|
[libdefaults] |
|
dns_lookup_realm = false |
|
ticket_lifetime = 24h |
|
renew_lifetime = 7d |
|
forwardable = true |
|
rdns = false |
|
pkinit_anchors = FILE:/etc/pki/tls/certs/ca-bundle.crt |
|
spake_preauth_groups = edwards25519 |
|
dns_canonicalize_hostname = fallback |
|
qualify_shortname = "" |
|
# default_realm = EXAMPLE.COM |
|
|
|
[realms] |
|
# EXAMPLE.COM = { |
|
# kdc = kerberos.example.com |
|
# admin_server = kerberos.example.com |
|
# } |
|
|
|
[domain_realm] |
|
# .example.com = EXAMPLE.COM |
|
# example.com = EXAMPLE.COM
|
|
|