Advertising
- Untitled
- Friday, July 20th, 2012 at 12:41:54pm MDT
- [logging]
- default = FILE:/var/log/krb5libs.log
- kdc = FILE:/var/log/krb5kdc.log
- admin_server = FILE:/var/log/kadmind.log
- [libdefaults]
- default_realm = EXAMPLE.COM
- dns_lookup_realm = false
- dns_lookup_kdc = false
- rdns = false
- ticket_lifetime = 24h
- forwardable = yes
- [realms]
- OPOWER.COM = {
- kdc = ipin001.va.example.it:88
- admin_server = ipin001.va.example.it:749
- default_domain = va.example.it
- pkinit_anchors = FILE:/etc/ipa/ca.crt
- }
- [domain_realm]
- .va.example.it = EXAMPLE.COM
- va.example.it = EXAMPLE.COM
- [dbmodules]
- EXAMPLE.COM = {
- db_library = kldap
- ldap_servers = ldapi://%2fvar%2frun%2fslapd-EXAMPLE-COM.socket
- ldap_kerberos_container_dn = cn=kerberos,dc=example,dc=com
- ldap_kdc_dn = uid=kdc,cn=sysaccounts,cn=etc,dc=example,dc=com
- ldap_kadmind_dn = uid=kdc,cn=sysaccounts,cn=etc,dc=example,dc=com
- ldap_service_password_file = /var/kerberos/krb5kdc/ldappwd
- }
advertising
Update the Post
Either update this post and resubmit it with changes, or make a new post.
You may also comment on this post.
Please note that information posted here will expire by default in one month. If you do not want it to expire, please set the expiry time above. If it is set to expire, web search engines will not be allowed to index it prior to it expiring. Items that are not marked to expire will be indexable by search engines. Be careful with your passwords. All illegal activities will be reported and any information will be handed over to the authorities, so be good.