# cat /etc/krb5.conf [logging] default = FILE:/var/log/klog_kerberos5 kdc = FILE:/var/log/klog_kdc admin_server = FILE:/var/log/klog_serveradmin [libdefaults] default_realm = MAINCOMPANY.GL.LOCAL ticket_lifetime = 24000 dns_lookup_realm = false dns_lookup_kdc = false krb4_config = /etc/krb.conf krb4_realms = /etc/krb.realms kdc_timesync = 1 ccache_type = 4 forwardable = true proxiable = true v4_instance_resolve = false v4_name_convert = { host = { rcmd = host ftp = ftp } plain = { something = something-else } } [domain_realm] MAINCOMPANY.gl.local = MAINCOMPANY.GL.LOCAL .MAINCOMPANY.gl.local = MAINCOMPANY.GL.LOCAL partners.gl.local = PARTNERS.GL.LOCAL .partners.gl.local = PARTNERS.GL.LOCAL SUBCOMPANY1.gl.local = SUBCOMPANY1.GL.LOCAL .SUBCOMPANY1.gl.local = SUBCOMPANY1.GL.LOCAL SUBCOMPANY2.gl.local = SUBCOMPANY2.GL.LOCAL .SUBCOMPANY2.gl.local = SUBCOMPANY2.GL.LOCAL SUBDOMAIN1MAINCOMPANY.gl.local = SUBDOMAIN1MAINCOMPANY.GL.LOCAL .SUBDOMAIN1MAINCOMPANY.gl.local = SUBDOMAIN1MAINCOMPANY.GL.LOCAL [realms] MAINCOMPANY.GL.LOCAL = { kdc = DC_1.MAINCOMPANY.gl.local:88 DC_3.MAINCOMPANY.gl.local:88 DC_2.MAINCOMPANY.gl.local:88 admin_server = DC_1.MAINCOMPANY.gl.local:749 DC_3.MAINCOMPANY.gl.local:749 DC_2.MAINCOMPANY.gl.local:749 default_domain = MAINCOMPANY.GL.LOCAL } PARTNERS.GL.LOCAL = { kdc = DC_6.partners.gl.local:88 admin_server = DC_6.partners.gl.local:749 default_domain = PARTNERS.GL.LOCAL } SUBCOMPANY1.GL.LOCAL = { kdc = DC_11.SUBCOMPANY1.gl.local:88 admin_server = DC_11.SUBCOMPANY1.gl.local:749 default_domain = SUBCOMPANY1.GL.LOCAL } SUBCOMPANY2.GL.LOCAL = { kdc = DC_4.SUBCOMPANY2.gl.local:88 admin_server = DC_4.SUBCOMPANY2.gl.local:749 default_domain = SUBCOMPANY2.GL.LOCAL } SUBDOMAIN1MAINCOMPANY.GL.LOCAL = { kdc = DC_5.SUBDOMAIN1MAINCOMPANY.gl.local:88 admin_server = DC_5.SUBDOMAIN1MAINCOMPANY.gl.local:749 default_domain = SUBDOMAIN1MAINCOMPANY.GL.LOCAL } [login] krb4_convert = true krb4_get_tickets = true