xref: /illumos-gate/usr/src/cmd/gss/etc/krb5.conf (revision 3db86aab)
1#
2# CDDL HEADER START
3#
4# The contents of this file are subject to the terms of the
5# Common Development and Distribution License, Version 1.0 only
6# (the "License").  You may not use this file except in compliance
7# with the License.
8#
9# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
10# or http://www.opensolaris.org/os/licensing.
11# See the License for the specific language governing permissions
12# and limitations under the License.
13#
14# When distributing Covered Code, include this CDDL HEADER in each
15# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
16# If applicable, add the following below this CDDL HEADER, with the
17# fields enclosed by brackets "[]" replaced with your own identifying
18# information: Portions Copyright [yyyy] [name of copyright owner]
19#
20# CDDL HEADER END
21#
22#
23# Copyright 2004 Sun Microsystems, Inc.  All rights reserved.
24# Use is subject to license terms.
25#
26# ident	"%Z%%M%	%I%	%E% SMI"
27#
28
29# krb5.conf template
30# In order to complete this configuration file
31# you will need to replace the __<name>__ placeholders
32# with appropriate values for your network.
33#
34[libdefaults]
35        default_realm = ___default_realm___
36
37[realms]
38        ___default_realm___ = {
39                kdc = ___master_kdc___
40                kdc = ___slave_kdc1___
41                kdc = ___slave_kdc2___
42                kdc = ___slave_kdcN___
43                admin_server = ___master_kdc___
44        }
45
46[domain_realm]
47	___domainname___ = ___default_realm___
48
49[logging]
50        default = FILE:/var/krb5/kdc.log
51        kdc = FILE:/var/krb5/kdc.log
52	kdc_rotate = {
53
54# How often to rotate kdc.log. Logs will get rotated no more
55# often than the period, and less often if the KDC is not used
56# frequently.
57
58		period = 1d
59
60# how many versions of kdc.log to keep around (kdc.log.0, kdc.log.1, ...)
61
62		versions = 10
63	}
64
65[appdefaults]
66	kinit = {
67		renewable = true
68		forwardable= true
69	}
70