src/configuration/Kerberos/krb5/krb5.conf

   1 [libdefaults]
   2         default_realm = ATHENA.MIT.EDU
   3
   4 # The following krb5.conf variables are only for MIT Kerberos.
   5         krb4_config = /etc/krb.conf
   6         krb4_realms = /etc/krb.realms
   7         kdc_timesync = 1
   8         ccache_type = 4
   9         forwardable = true
  10         proxiable = true
  11
  12 # The following encryption type specification will be used by MIT Kerberos
  13 # if uncommented.  In general, the defaults in the MIT Kerberos code are
  14 # correct and overriding these specifications only serves to disable new
  15 # encryption types as they are added, creating interoperability problems.
  16 #
  17 # Thie only time when you might need to uncomment these lines and change
  18 # the enctypes is if you have local software that will break on ticket
  19 # caches containing ticket encryption types it doesn't know about (such as
  20 # old versions of Sun Java).
  21
  22         allow_weak_crypto = false
  23         permitted_enctypes= aes256-cts-hmac-sha1-96 camellia256-cts-cmac aes128-cts-hmac-sha1-96 camellia128-cts-cmac
  24         default_tkt_enctypes= aes256-cts-hmac-sha1-96 camellia256-cts-cmac aes128-cts-hmac-sha1-96 camellia128-cts-cmac
  25         default_tgs_enctypes= aes256-cts-hmac-sha1-96 camellia256-cts-cmac aes128-cts-hmac-sha1-96 camellia128-cts-cmac
  26
  27 # The following libdefaults parameters are only for Heimdal Kerberos.
  28         v4_instance_resolve = false
  29         v4_name_convert = {
  30                 host = {
  31                         rcmd = host
  32                         ftp = ftp
  33                 }
  34                 plain = {
  35                         something = something-else
  36                 }
  37         }
  38         fcc-mit-ticketflags = true
  39
  40 [realms]
  41         ATHENA.MIT.EDU = {
  42                 kdc = kerberos.mit.edu:88
  43                 kdc = kerberos-1.mit.edu:88
  44                 kdc = kerberos-2.mit.edu:88
  45                 admin_server = kerberos.mit.edu
  46                 default_domain = mit.edu
  47         }
  48         MEDIA-LAB.MIT.EDU = {
  49                 kdc = kerberos.media.mit.edu
  50                 admin_server = kerberos.media.mit.edu
  51         }
  52         ZONE.MIT.EDU = {
  53                 kdc = casio.mit.edu
  54                 kdc = seiko.mit.edu
  55                 admin_server = casio.mit.edu
  56         }
  57         MOOF.MIT.EDU = {
  58                 kdc = three-headed-dogcow.mit.edu:88
  59                 kdc = three-headed-dogcow-1.mit.edu:88
  60                 admin_server = three-headed-dogcow.mit.edu
  61         }
  62         CSAIL.MIT.EDU = {
  63                 kdc = kerberos-1.csail.mit.edu
  64                 kdc = kerberos-2.csail.mit.edu
  65                 admin_server = kerberos.csail.mit.edu
  66                 default_domain = csail.mit.edu
  67                 krb524_server = krb524.csail.mit.edu
  68         }
  69         IHTFP.ORG = {
  70                 kdc = kerberos.ihtfp.org
  71                 admin_server = kerberos.ihtfp.org
  72         }
  73         GNU.ORG = {
  74                 kdc = kerberos.gnu.org
  75                 kdc = kerberos-2.gnu.org
  76                 kdc = kerberos-3.gnu.org
  77                 admin_server = kerberos.gnu.org
  78         }
  79         1TS.ORG = {
  80                 kdc = kerberos.1ts.org
  81                 admin_server = kerberos.1ts.org
  82         }
  83         GRATUITOUS.ORG = {
  84                 kdc = kerberos.gratuitous.org
  85                 admin_server = kerberos.gratuitous.org
  86         }
  87         DOOMCOM.ORG = {
  88                 kdc = kerberos.doomcom.org
  89                 admin_server = kerberos.doomcom.org
  90         }
  91         ANDREW.CMU.EDU = {
  92                 kdc = kerberos.andrew.cmu.edu
  93                 kdc = kerberos2.andrew.cmu.edu
  94                 kdc = kerberos3.andrew.cmu.edu
  95                 admin_server = kerberos.andrew.cmu.edu
  96                 default_domain = andrew.cmu.edu
  97         }
  98         CS.CMU.EDU = {
  99                 kdc = kerberos.cs.cmu.edu
 100                 kdc = kerberos-2.srv.cs.cmu.edu
 101                 admin_server = kerberos.cs.cmu.edu
 102         }
 103         DEMENTIA.ORG = {
 104                 kdc = kerberos.dementix.org
 105                 kdc = kerberos2.dementix.org
 106                 admin_server = kerberos.dementix.org
 107         }
 108         stanford.edu = {
 109                 kdc = krb5auth1.stanford.edu
 110                 kdc = krb5auth2.stanford.edu
 111                 kdc = krb5auth3.stanford.edu
 112                 master_kdc = krb5auth1.stanford.edu
 113                 admin_server = krb5-admin.stanford.edu
 114                 default_domain = stanford.edu
 115         }
 116         UTORONTO.CA = {
 117                 kdc = kerberos1.utoronto.ca
 118                 kdc = kerberos2.utoronto.ca
 119                 kdc = kerberos3.utoronto.ca
 120                 admin_server = kerberos1.utoronto.ca
 121                 default_domain = utoronto.ca
 122         }
 123
 124 [domain_realm]
 125         .mit.edu = ATHENA.MIT.EDU
 126         mit.edu = ATHENA.MIT.EDU
 127         .media.mit.edu = MEDIA-LAB.MIT.EDU
 128         media.mit.edu = MEDIA-LAB.MIT.EDU
 129         .csail.mit.edu = CSAIL.MIT.EDU
 130         csail.mit.edu = CSAIL.MIT.EDU
 131         .whoi.edu = ATHENA.MIT.EDU
 132         whoi.edu = ATHENA.MIT.EDU
 133         .stanford.edu = stanford.edu
 134         .slac.stanford.edu = SLAC.STANFORD.EDU
 135         .toronto.edu = UTORONTO.CA
 136         .utoronto.ca = UTORONTO.CA
 137
 138 [login]
 139         krb4_convert = true
 140         krb4_get_tickets = false