[libdefaults]
	default_realm = {{ kerberos_realm | upper }}
	dns_lookup_realm = true
    dns_lookup_kdc = true

# The following krb5.conf variables are only for MIT Kerberos.
	kdc_timesync = 1
	ccache_type = 4
	forwardable = true
	proxiable = true
	rdns = false

    ticket_lifetime = 3d
    renew_lifetime = 7d

# The following libdefaults parameters are only for Heimdal Kerberos.
	fcc-mit-ticketflags = true

[realms]
	{{ kerberos_realm | upper }} = {
		kdc = kerberos.{{ kerberos_realm }}
		admin_server = kerberos.{{ kerberos_realm }}
		default_principal_flags = +preauth
	}

[domain_realm]
    {{ kerberos_realm }}  = {{ kerberos_realm | upper }}
    .{{ kerberos_realm }} = {{ kerberos_realm | upper }}