newserver/roles/ams_sso/files/krb5.conf_prod
Marcus Gillitzer b0565e6dd1 krb5.conf für PROD und DEVEL eingefügt..
Schulung und QS sind darin umfasst..
2021-05-10 15:42:52 +02:00

39 lines
888 B
Plaintext

# Configuration snippets may be placed in this directory as well
includedir /etc/krb5.conf.d/
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
dns_lookup_realm = false
dns_lookup_kdc = false
kdc_timeout = 5sec
ticket_lifetime = 24h
renew_lifetime = 7d
forwardable = true
#rdns = false
pkinit_anchors = /etc/pki/tls/certs/ca-bundle.crt
default_realm = POLIZEI-BW.NET
default_ccache_name = KEYRING:persistent:%{uid}
[realms]
POLIZEI-BW.NET = {
#kdc = polizei-bw.net
kdc = 80.155.1.87:88
kdc = 80.155.1.187:88
kdc = 80.155.1.89:88
kdc = 80.155.1.189:88
kdc = 80.155.1.91:88
kdc = 80.155.1.191:88
kdc = 80.155.1.92:88
kdc = 80.155.1.192:88
default_domain = POLIZEI-BW.NET
admin_server = 80.155.1.87:88
}
[domain_realm]
.polizei-bw.net = POLIZEI-BW.NET
polizei-bw.net = POLIZEI-BW.NET