krb5.conf für PROD und DEVEL eingefügt..

Schulung und QS sind darin umfasst..

roles/ams_sso/files/krb5.conf_prod

@@ -0,0 +1,38 @@
+# Configuration snippets may be placed in this directory as well
+includedir /etc/krb5.conf.d/
+
+[logging]
+ default = FILE:/var/log/krb5libs.log
+ kdc = FILE:/var/log/krb5kdc.log
+ admin_server = FILE:/var/log/kadmind.log
+
+[libdefaults]
+ dns_lookup_realm = false
+ dns_lookup_kdc = false
+ kdc_timeout = 5sec
+ ticket_lifetime = 24h
+ renew_lifetime = 7d
+ forwardable = true
+ #rdns = false
+ pkinit_anchors = /etc/pki/tls/certs/ca-bundle.crt
+ default_realm = POLIZEI-BW.NET
+ default_ccache_name = KEYRING:persistent:%{uid}
+
+[realms]
+ POLIZEI-BW.NET = {
+ #kdc = polizei-bw.net
+kdc = 80.155.1.87:88
+kdc = 80.155.1.187:88
+kdc = 80.155.1.89:88
+kdc = 80.155.1.189:88
+kdc = 80.155.1.91:88
+kdc = 80.155.1.191:88
+kdc = 80.155.1.92:88
+kdc = 80.155.1.192:88
+  default_domain = POLIZEI-BW.NET
+  admin_server = 80.155.1.87:88
+}
+
+[domain_realm]
+.polizei-bw.net = POLIZEI-BW.NET
+polizei-bw.net = POLIZEI-BW.NET