#File modified by ipa-client-install

includedir /etc/krb5.conf.d/
includedir /var/lib/sss/pubconf/krb5.include.d/

######### AFTER IPA #######################
#[logging]
#default = FILE:/var/log/krb5libs.log
#kdc = FILE:/var/log/krb5kdc.log
#admin_server = FILE:/var/log/kadmind.log

#[libdefaults]
#  default_realm = LSHS.DC
#  dns_lookup_realm = true
#  dns_lookup_kdc = true
#  rdns = false
#  dns_canonicalize_hostname = false
#  ticket_lifetime = 24h
#  forwardable = true
#  udp_preference_limit = 0
#  default_ccache_name = KEYRING:persistent:%{uid}


#[realms]
#  LSHS.DC = {
#    pkinit_anchors = FILE:/var/lib/ipa-client/pki/kdc-ca-bundle.pem
#    pkinit_pool = FILE:/var/lib/ipa-client/pki/ca-bundle.pem

#  }


#[domain_realm]
#  .example.dc = LSHS.DC
#  example.dc = LSHS.DC
#  ipacli-irvlt01.example.dc = LSHS.DC

[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
default_realm = LSHS.DC
dns_lookup_realm = false
dns_lookup_kdc = false
rdns = false
ticket_lifetime = 24h
forwardable = yes
allow_weak_crypto = true
default_ccache_name = KEYRING:persistent:%{uid}

[realms]
LSHS.DC = {
kdc = ipa-irvlt01.example.dc:88
admin_server = ipa-irvlt01.example.dc:749
default_domain = example.dc
}
[domain_realm]
.example.com = LSHS.DC
example.com = LSHS.DC
############################################