5 kx [kdcdefaults]
5 kx kdc_listen = 88
5 kx kdc_tcp_listen = 88
5 kx
5 kx [realms]
5 kx ATHENA.MIT.EDU = {
5 kx kadmind_port = 749
5 kx max_life = 12h 0m 0s
5 kx max_renewable_life = 7d 0h 0m 0s
5 kx master_key_type = aes256-cts-hmac-sha1-96
5 kx supported_enctypes = aes256-cts-hmac-sha1-96:normal aes128-cts-hmac-sha1-96:normal
5 kx database_module = openldap_ldapconf
5 kx }
5 kx
5 kx [logging]
5 kx kdc = FILE:/var/kerberos/krb5kdc/kdc.log
5 kx admin_server = FILE:/var/kerberos/krb5kdc/kadmin.log
5 kx
5 kx [dbdefaults]
5 kx ldap_kerberos_container_dn = cn=krbcontainer,dc=mit,dc=edu
5 kx
5 kx [dbmodules]
5 kx openldap_ldapconf = {
5 kx db_library = kldap
5 kx disable_last_success = true
5 kx ldap_kdc_dn = "cn=krbadmin,dc=mit,dc=edu"
5 kx # this object needs to have read rights on
5 kx # the realm container and principal subtrees
5 kx ldap_kadmind_dn = "cn=krbadmin,dc=mit,dc=edu"
5 kx # this object needs to have read and write rights on
5 kx # the realm container and principal subtrees
5 kx ldap_service_password_file = /etc/kerberos/service.keyfile
5 kx ldap_servers = ldaps://kerberos.mit.edu
5 kx ldap_conns_per_server = 5
5 kx }