files/mit/kdc.conf

*bf6873c5SCy Schubert[kdcdefaults]
*bf6873c5SCy Schubert    kdc_ports                   = 88
*bf6873c5SCy Schubert    kdc_tcp_ports               = 88
*bf6873c5SCy Schubert    restrict_anonymous_to_tgt   = true
*bf6873c5SCy Schubert
*bf6873c5SCy Schubert[realms]
*bf6873c5SCy Schubert    MIT.TEST = {
*bf6873c5SCy Schubert        database_name           = /var/lib/krb5kdc/principal
*bf6873c5SCy Schubert        admin_keytab            = /var/lib/krb5kdc/kadm5.keytab
*bf6873c5SCy Schubert        acl_file                = /etc/krb5kdc/kadm5.acl
*bf6873c5SCy Schubert        key_stash_file          = /var/lib/krb5kdc/stash
*bf6873c5SCy Schubert        max_life                = 1d 1h 0m 0s
*bf6873c5SCy Schubert        max_renewable_life      = 7d 0h 0m 0s
*bf6873c5SCy Schubert        master_key_type         = aes256-cts
*bf6873c5SCy Schubert        supported_enctypes      = aes256-cts:normal
*bf6873c5SCy Schubert        default_principal_flags = +preauth
*bf6873c5SCy Schubert        pkinit_identity         = FILE:/var/lib/krb5kdc/kdc.pem,/var/lib/krb5kdc/kdckey.pem
*bf6873c5SCy Schubert        pkinit_anchors          = FILE:/etc/krb5kdc/cacert.pem
*bf6873c5SCy Schubert    }