Kerberos configuration adapted for CERN
[libdefaults] default_realm = CERN.CH ticket_lifetime = 25h renew_lifetime = 120h forwardable = true proxiable = true allow_weak_crypto = true default_tkt_enctypes = arcfour-hmac-md5 aes256-cts aes128-cts des3-cbc-sha1 des-cbc-md5 des-cbc-crc [realms] CERN.CH = { default_domain = domain.com kdc = cerndc.domain.com krb4_get_tickets = true v4_name_convert = { host = { rcmd = host } } } [domain_realm] .domain.com = CERN.CH