SOURCES: krb5.conf - don't ask for trouble

baggins baggins at pld-linux.org
Sat Mar 31 00:14:31 CEST 2007


Author: baggins                      Date: Fri Mar 30 22:14:31 2007 GMT
Module: SOURCES                       Tag: HEAD
---- Log message:
- don't ask for trouble

---- Files affected:
SOURCES:
   krb5.conf (1.4 -> 1.5) 

---- Diffs:

================================================================
Index: SOURCES/krb5.conf
diff -u SOURCES/krb5.conf:1.4 SOURCES/krb5.conf:1.5
--- SOURCES/krb5.conf:1.4	Sat Sep 13 20:38:08 2003
+++ SOURCES/krb5.conf	Sat Mar 31 00:14:26 2007
@@ -2,34 +2,35 @@
 	profile = /var/lib/kerberos/kdc.conf
 
 [libdefaults]
-	ticket_lifetime = 24000
-	default_realm = PLD-LINUX.ORG
-	default_tgs_enctypes = des3-hmac-sha1 des-cbc-crc
-	default_tkt_enctypes = des3-hmac-sha1 des-cbc-crc
-	permitted_enctypes = des3-hmac-sha1 des-cbc-crc
+	default_realm = EXAMPLE.COM
 	dns_lookup_realm = false
 	dns_lookup_kdc = false
-	kdc_req_checksum_type = 2
-	ccache_type = 1
+	ticket_lifetime = 24h
 	forwardable = true
-	proxiable = true
+#	default_tgs_enctypes = des3-hmac-sha1 des-cbc-crc
+#	default_tkt_enctypes = des3-hmac-sha1 des-cbc-crc
+#	permitted_enctypes = des3-hmac-sha1 des-cbc-crc
+#	kdc_req_checksum_type = 2
+#	ccache_type = 1
+#	proxiable = true
+# Kerberos IV
 #	krb4_config = /etc/kerberos/v4/krb.conf
 #	krb4_realms = /etc/kerberos/v4/krb.realms
 
 [realms]
-	PLD-LINUX.ORG = {
-		kdc = KDC1.PLD-LINUX.ORG:88
-		kdc = KDC2.PLD-LINUX.ORG:88
-		admin_server = KDC1.PLD-LINUX.ORG:749
-		default_domain = PLD-LINUX.ORG
+	EXAMPLE.COM = {
+		kdc = kdc1.example.com:88
+		kdc = kdc2.example.com:88
+		admin_server = kdc1.example.com:749
+		default_domain = example.com
 #		v4_instance_convert = {
-#			pld = PLD-LINUX.ORG
+#			example = EXAMPLE.COM
 #		}
 	}
 
 [domain_realm]
-	.pld-linux.org = PLD-LINUX.ORG
-	pld-linux.org = PLD-LINUX.ORG
+	.example.com = EXAMPLE.COM
+	example.com = EXAMPLE.COM
 
 [logging]
 	default = FILE:/var/log/kerberos/krb5
@@ -42,6 +43,7 @@
 	        ticket_lifetime = 36000
 		renew_lifetime = 36000
 		forwardable = true
+#		krb4_convert = false
 	}
 #	login = {
 #		krb4_convert = false
================================================================

---- CVS-web:
    http://cvs.pld-linux.org/SOURCES/krb5.conf?r1=1.4&r2=1.5&f=u



More information about the pld-cvs-commit mailing list