31 lines
789 B
Django/Jinja
31 lines
789 B
Django/Jinja
# Configuration snippets may be placed in this directory as well
|
|
includedir /etc/krb5.conf.d/
|
|
|
|
[logging]
|
|
default = FILE:/var/log/krb5libs.log
|
|
kdc = FILE:/var/log/krb5kdc.log
|
|
admin_server = FILE:/var/log/kadmind.log
|
|
|
|
[libdefaults]
|
|
dns_lookup_realm = false
|
|
dns_lookup_kdc = false
|
|
kdc_timeout = 10sec
|
|
ticket_lifetime = 24h
|
|
renew_lifetime = 7d
|
|
forwardable = true
|
|
rdns = false
|
|
pkinit_anchors = /etc/pki/tls/certs/ca-bundle.crt
|
|
default_realm = {{ sso_domain_upper }}
|
|
default_ccache_name = KEYRING:persistent:%{uid}
|
|
|
|
[realms]
|
|
{{ sso_domain_upper }} = {
|
|
kdc = {{ sso_domain_lower }}
|
|
default_domain = {{ sso_domain_upper }}
|
|
admin_server = {{ sso_domain_lower }}
|
|
}
|
|
|
|
[domain_realm]
|
|
.{{ sso_domain_lower }} = {{ sso_domain_upper }}
|
|
{{ sso_domain_lower }} = {{ sso_domain_upper }}
|