[root@san1 ~]# cat /etc/krb5.conf [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] default_realm = in.newsweb.fr dns_lookup_realm = false dns_lookup_kdc = false ticket_lifetime = 24h forwardable = yes [realms] EXAMPLE.COM = { kdc = kerberos.example.com:88 admin_server = kerberos.example.com:749 default_domain = example.com } PDC = { kdc = pdc.in.newsweb.fr } PDC.IN.NEWSWEB.FR = { kdc = pdc.in.newsweb.fr } in.newsweb.fr = { kdc = pdc.in.newsweb.fr:88 admin_server = pdc.in.newsweb.fr:749 } IN.NEWSWEB.FR = { kdc = pdc.in.newsweb.fr } [domain_realm] .example.com = EXAMPLE.COM example.com = EXAMPLE.COM [kdc] profile = /var/kerberos/krb5kdc/kdc.conf [appdefaults] pam = { debug = false ticket_lifetime = 36000 renew_lifetime = 36000 forwardable = true krb4_convert = false }