[libdefaults] ticket_lifetime = 24000 default_realm = ATI.LOCAL clockskew = 300 [realms] ATI.LOCAL = { kdc = 192.168.1.230 default_domain = ati.local admin_server = 192.168.1.230 } EXAMPLE.COM = { kdc = kerberos.example.com admin_server = kerberos.example.com } [logging] kdc = FILE:/var/log/krb5/krb5kdc.log admin_server = FILE:/var/log/krb5/kadmind.log default = SYSLOG:NOTICE:DAEMON [domain_realm] ati.local = ATI.LOCAL .ati.local = ATI.LOCAL ATI.LOCAL = ATI.LOCAL .ATI.LOCAL = ATI.LOCAL [appdefaults] pam = { ticket_lifetime = 1d renew_lifetime = 1d forwardable = true proxiable = false retain_after_close = false minimum_uid = 1 use_shmem = sshd }