; AD  : This Kerberos configuration is for CERN's Active Directory realm.
;
; /etc/krb5.conf

[libdefaults]
 default_realm = CERN.CH
 ticket_lifetime = 25h
 renew_lifetime = 120h
 forwardable = true
 proxiable = true
 default_tkt_enctypes = aes256-cts-hmac-sha1-96 aes256-cts-hmac-sha384-192 camellia256-cts-cmac aes128-cts-hmac-sha1-96 aes128-cts-hmac-sha256-128 camellia128-cts-cmac
 chpw_prompt = true
 rdns = false

[appdefaults]
pam = {
  external = true
  krb4_convert = false
  krb4_convert_524 = false
  krb4_use_as_req = false
}

[domain_realm]
.cern.ch = CERN.CH
.fnal.gov = FNAL.GOV
.hep.man.ac.uk = HEP.MAN.AC.UK
.in2p3.fr = IN2P3.FR
# No default domain for KFKI.HU specified.

[realms]
# Start of puppet output for CERN.CH
 CERN.CH  = {
  default_domain = cern.ch
  kpasswd_server = cerndc.cern.ch
  admin_server = cerndc.cern.ch
  kdc = cerndc.cern.ch
  v4_name_convert = {
    host = {
      rcmd = host
    }
  }
 }


# Start of puppet output for FNAL.GOV
 FNAL.GOV  = {
  default_domain = fnal.gov
  admin_server = krb-fnal-admin.fnal.gov
   kdc = krb-fnal-fcc3.fnal.gov:88
   kdc = krb-fnal-2.fnal.gov:88
   kdc = krb-fnal-3.fnal.gov:88
   kdc = krb-fnal-1.fnal.gov:88
   kdc = krb-fnal-4.fnal.gov:88
   kdc = krb-fnal-enstore.fnal.gov:88
   kdc = krb-fnal-fg2.fnal.gov:88
   kdc = krb-fnal-cms188.fnal.gov:88
   kdc = krb-fnal-cms204.fnal.gov:88
   kdc = krb-fnal-d0online.fnal.gov:88
 }


# Start of puppet output for HEP.MAN.AC.UK
 HEP.MAN.AC.UK  = {
  default_domain = hep.man.ac.uk
  kpasswd_server = afs4.hep.man.ac.uk
  admin_server = afs4.hep.man.ac.uk
   kdc = afs1.hep.man.ac.uk
   kdc = afs2.hep.man.ac.uk
   kdc = afs3.hep.man.ac.uk
   kdc = afs4.hep.man.ac.uk
 }


# Start of puppet output for IN2P3.FR
 IN2P3.FR  = {
  default_domain = in2p3.fr
  kpasswd_server = kerberos-admin.in2p3.fr
  admin_server = kerberos-admin.in2p3.fr
   kdc = kerberos-1.in2p3.fr
   kdc = kerberos-2.in2p3.fr
   kdc = kerberos-3.in2p3.fr
 }


# Start of puppet output for KFKI.HU
 KFKI.HU  = {
  admin_server = kerberos.kfki.hu
   kdc = kerberos.kfki.hu
 }


