|
![](https://seccdn.libravatar.org/avatar/ea4840855a8a2d18e052a519bb780f817a45cc3e7e1b65e2ee9a2389dc824d95?s=16&d=retro) |
9baef8f |
# To opt out of the system crypto-policies configuration of krb5, remove the
|
|
![](https://seccdn.libravatar.org/avatar/ea4840855a8a2d18e052a519bb780f817a45cc3e7e1b65e2ee9a2389dc824d95?s=16&d=retro) |
9baef8f |
# symlink at /etc/krb5.conf.d/crypto-policies which will not be recreated.
|
|
![](https://seccdn.libravatar.org/avatar/ea4840855a8a2d18e052a519bb780f817a45cc3e7e1b65e2ee9a2389dc824d95?s=16&d=retro) |
6cb6b69 |
includedir /etc/krb5.conf.d/
|
|
![](https://seccdn.libravatar.org/avatar/ea4840855a8a2d18e052a519bb780f817a45cc3e7e1b65e2ee9a2389dc824d95?s=16&d=retro) |
6cb6b69 |
|
|
cvsdist |
af3b546 |
[logging]
|
|
![](https://seccdn.libravatar.org/avatar/ea4840855a8a2d18e052a519bb780f817a45cc3e7e1b65e2ee9a2389dc824d95?s=16&d=retro) |
6b1b652 |
default = FILE:/var/log/krb5libs.log
|
|
![](https://seccdn.libravatar.org/avatar/ea4840855a8a2d18e052a519bb780f817a45cc3e7e1b65e2ee9a2389dc824d95?s=16&d=retro) |
6b1b652 |
kdc = FILE:/var/log/krb5kdc.log
|
|
![](https://seccdn.libravatar.org/avatar/ea4840855a8a2d18e052a519bb780f817a45cc3e7e1b65e2ee9a2389dc824d95?s=16&d=retro) |
6b1b652 |
admin_server = FILE:/var/log/kadmind.log
|
|
cvsdist |
af3b546 |
|
|
cvsdist |
af3b546 |
[libdefaults]
|
|
![](https://seccdn.libravatar.org/avatar/ea4840855a8a2d18e052a519bb780f817a45cc3e7e1b65e2ee9a2389dc824d95?s=16&d=retro) |
6b1b652 |
dns_lookup_realm = false
|
|
![](https://seccdn.libravatar.org/avatar/ea4840855a8a2d18e052a519bb780f817a45cc3e7e1b65e2ee9a2389dc824d95?s=16&d=retro) |
6b1b652 |
ticket_lifetime = 24h
|
|
![](https://seccdn.libravatar.org/avatar/ea4840855a8a2d18e052a519bb780f817a45cc3e7e1b65e2ee9a2389dc824d95?s=16&d=retro) |
6b1b652 |
renew_lifetime = 7d
|
|
![](https://seccdn.libravatar.org/avatar/ea4840855a8a2d18e052a519bb780f817a45cc3e7e1b65e2ee9a2389dc824d95?s=16&d=retro) |
6b1b652 |
forwardable = true
|
|
![](https://seccdn.libravatar.org/avatar/ea4840855a8a2d18e052a519bb780f817a45cc3e7e1b65e2ee9a2389dc824d95?s=16&d=retro) |
6b1b652 |
rdns = false
|
|
![](https://seccdn.libravatar.org/avatar/ea4840855a8a2d18e052a519bb780f817a45cc3e7e1b65e2ee9a2389dc824d95?s=16&d=retro) |
6c692d1 |
pkinit_anchors = FILE:/etc/pki/tls/certs/ca-bundle.crt
|
|
![](https://seccdn.libravatar.org/avatar/ea4840855a8a2d18e052a519bb780f817a45cc3e7e1b65e2ee9a2389dc824d95?s=16&d=retro) |
2c340ef |
spake_preauth_groups = edwards25519
|
|
![](https://seccdn.libravatar.org/avatar/ea4840855a8a2d18e052a519bb780f817a45cc3e7e1b65e2ee9a2389dc824d95?s=16&d=retro) |
331a9df |
dns_canonicalize_hostname = fallback
|
|
![](https://seccdn.libravatar.org/avatar/ea4840855a8a2d18e052a519bb780f817a45cc3e7e1b65e2ee9a2389dc824d95?s=16&d=retro) |
f15271f |
qualify_shortname = ""
|
|
![](https://seccdn.libravatar.org/avatar/ea4840855a8a2d18e052a519bb780f817a45cc3e7e1b65e2ee9a2389dc824d95?s=16&d=retro) |
6b1b652 |
# default_realm = EXAMPLE.COM
|
|
cvsdist |
af3b546 |
|
|
cvsdist |
af3b546 |
[realms]
|
|
![](https://seccdn.libravatar.org/avatar/830d03208be58a30581b9ec914163ac3247fea9d7b90dfa476b86f1ed9183af9?s=16&d=retro) |
f2a7c1d |
# EXAMPLE.COM = {
|
|
![](https://seccdn.libravatar.org/avatar/ea4840855a8a2d18e052a519bb780f817a45cc3e7e1b65e2ee9a2389dc824d95?s=16&d=retro) |
6b1b652 |
# kdc = kerberos.example.com
|
|
![](https://seccdn.libravatar.org/avatar/ea4840855a8a2d18e052a519bb780f817a45cc3e7e1b65e2ee9a2389dc824d95?s=16&d=retro) |
6b1b652 |
# admin_server = kerberos.example.com
|
|
![](https://seccdn.libravatar.org/avatar/830d03208be58a30581b9ec914163ac3247fea9d7b90dfa476b86f1ed9183af9?s=16&d=retro) |
f2a7c1d |
# }
|
|
cvsdist |
af3b546 |
|
|
cvsdist |
af3b546 |
[domain_realm]
|
|
![](https://seccdn.libravatar.org/avatar/830d03208be58a30581b9ec914163ac3247fea9d7b90dfa476b86f1ed9183af9?s=16&d=retro) |
f2a7c1d |
# .example.com = EXAMPLE.COM
|
|
![](https://seccdn.libravatar.org/avatar/830d03208be58a30581b9ec914163ac3247fea9d7b90dfa476b86f1ed9183af9?s=16&d=retro) |
f2a7c1d |
# example.com = EXAMPLE.COM
|