supergrover $ ./aklog -d
Authenticating to cell coyhile.com (server supergrover).
We've deduced that we need to authenticate using referrals.
Getting tickets: afs/coyhile.com@
Using Kerberos V5 ticket natively
About to resolve name hile@COYHILE.COM to id in cell coyhile.com.
Id 32766
doing first-time registration of hile@coyhile.com at coyhile.com
aklog: Permission denied so unable to create remote PTS user hile@coyhile.com in cell coyhile.com (status: 267269).
Set username to hile@coyhile.com
Setting tokens. hile@coyhile.com /  @ COYHILE.COM 
supergrover $ ./unlog
supergrover $ ./aklog -d -c coyhile.com -k COYHILE.COM
Authenticating to cell coyhile.com (server supergrover).
We were told to authenticate to realm COYHILE.COM.
Getting tickets: afs/coyhile.com@COYHILE.COM
Using Kerberos V5 ticket natively
About to resolve name hile to id in cell coyhile.com.
Id 1000
Set username to AFS ID 1000
Setting tokens. AFS ID 1000 /  @ COYHILE.COM 
supergrover $ 



[libdefaults]
        default_realm = COYHILE.COM
        default_keytab_name = /opt/krb5/etc/krb5.keytab

[realms]
        COYHILE.COM = {
                kdc = kerberos.coyhile.com
                kdc = kerberos-1.coyhile.com
                admin_server = keymaster.coyhile.com
        }
[domain_realm]
        .coyhile.com  = COYHILE.COM
        supergrover.coyhile.com = COYHILE.COM

[logging]
        default = FILE:/opt/krb5/var/krb5kdc/kdc.log
        kdc = FILE:/opt/krb5/var/krb5kdc/kdc.log
        kdc_rotate = {

# How often to rotate kdc.log. Logs will get rotated no more
# often than the period, and less often if the KDC is not used
# frequently.

                period = 1d

# how many versions of kdc.log to keep around (kdc.log.0, kdc.log.1, ...)

                versions = 10
        }