[logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] # Contains various default values used by the Kerberos V5 library. default_realm = CS.STANFORD.EDU renew_lifetime = 7d #dns_lookup_realm = false #dns_lookup_kdc = false default_lifetime = 24h max_lifetime = 24h ticket_lifetime = 24h #max_life = 24h 0m 0s #default_tgs_enctypes = des-cbc-crc #default_tkt_enctypes = des-cbc-crc krb4_config = /etc/krb.conf krb4_realms = /etc/krb.realms kdc_req_checksum_type = 2 ap_req_checksum_type = 2 safe_checksum_type = 3 ccache_type = 2 [realms] CS.STANFORD.EDU = { kdc = cs-kdc-1.stanford.edu:88 kdc = cs-kdc-2.stanford.edu:88 kdc = cs-kdc-3.stanford.edu:88 admin_server = cs-kdc-1.stanford.edu:749 default_domain = stanford.edu } stanford.edu = { kdc = krb5auth1.stanford.edu:88 kdc = krb5auth2.stanford.edu:88 kdc = krb5auth3.stanford.edu:88 admin_server = krb5-admin.stanford.edu default_domain = stanford.edu v4_realm = IR.STANFORD.EDU } MS.STANFORD.EDU = { kdc = msdc0.ms.stanford.edu:88 kdc = msdc1.ms.stanford.edu:88 } WIN.STANFORD.EDU = { kdc = mothra.win.stanford.edu:88 kdc = rodan.win.stanford.edu:88 } VIX.COM = { kdc = kerberos-0.vix.com:88 kdc = kerberos-1.vix.com:88 kdc = kerberos-2.vix.com:88 admin_server = kerberos-0.vix.com:749 default_domain = vix.com } [domain_realm] .stanford.edu = CS.STANFORD.EDU cs.stanford.edu = CS.STANFORD.EDU [kdc] profile = /var/kerberos/krb5kdc/kdc.conf [appdefaults] krb4_get_tickets = false krb5_get_tickets = true krb5_get_forwardable = true pam = { debug = false forwardable = true krb4_convert = true ticket_lifetime = 86000 } kinit = { krb_run_aklog = true krb4_convert = false ticket_lifetime=86000 } stanford.edu = { aklog_path = /etc/leland/aklog krb4_get_tickets = true krb4_convert = false krb_run_aklog = false default_realm = stanford.edu } lpd = { default_domain = stanford.edu }