rainbowsheep-cloud/roles/kerberos/templates/krb5.conf.j2

28 lines
710 B
Django/Jinja

[libdefaults]
default_realm = {{ kerberos_realm | upper }}
dns_lookup_realm = true
dns_lookup_kdc = true
# The following krb5.conf variables are only for MIT Kerberos.
kdc_timesync = 1
ccache_type = 4
forwardable = true
proxiable = true
rdns = false
ticket_lifetime = 3d
renew_lifetime = 7d
# The following libdefaults parameters are only for Heimdal Kerberos.
fcc-mit-ticketflags = true
[realms]
{{ kerberos_realm | upper }} = {
kdc = kerberos.{{ kerberos_realm }}
admin_server = kerberos.{{ kerberos_realm }}
default_principal_flags = +preauth
}
[domain_realm]
{{ kerberos_realm }} = {{ kerberos_realm | upper }}
.{{ kerberos_realm }} = {{ kerberos_realm | upper }}