infra/roles/kerberos5/templates/krb5.conf.j2

29 lines
688 B
Django/Jinja

#includedir /etc/krb5.conf.d/
[logging]
# default = FILE:/var/log/krb5libs.log
# kdc = FILE:/var/log/krb5kdc.log
# admin_server = FILE:/var/log/kadmind.log
[libdefaults]
dns_lookup_kdc = false
dns_lookup_realm = false
ticket_lifetime = 24h
renew_lifetime = 7d
forwardable = true
rdns = false
default_realm = {{ krb5_realm | upper }}
# default_ccache_name = KEYRING:persistent:%{uid}
[realms]
{{ krb5_realm | upper }} = {
kdc = kdc0.{{ krb5_realm | lower }}
admin_server = kdc0.{{ krb5_realm | lower }}
default_domain = {{ krb5_realm | lower }}
}
[domain_realm]
.{{ krb5_realm | lower }} = {{ krb5_realm | upper }}
{{ krb5_realm | lower }} = {{ krb5_realm | upper }}