KašpiPage

Kerberos configuration adapted for CERN

[libdefaults]
 default_realm = CERN.CH
 ticket_lifetime = 25h
 renew_lifetime = 120h
 forwardable = true
 proxiable = true
 allow_weak_crypto = true
 default_tkt_enctypes = arcfour-hmac-md5 aes256-cts aes128-cts des3-cbc-sha1 des-cbc-md5 des-cbc-crc

[realms]
 CERN.CH = {
  default_domain = domain.com
  kdc = cerndc.domain.com

  krb4_get_tickets = true

  v4_name_convert = {
     host = {
         rcmd = host
     }
  }
 }

[domain_realm]
 .domain.com = CERN.CH