; /etc/krb5.conf

[libdefaults]

default_realm = CERN.CH

ticket_lifetime = 25h

renew_lifetime = 120h

forwardable = true

proxiable = true

default_tkt_enctypes = aes256-cts-hmac-sha1-96 aes256-cts-hmac-sha384-192 aes128-cts-hmac-sha256-128 aes128-cts-hmac-sha1-96

chpw_prompt = true

rdns = true

dns_canonicalize_hostname = fallback

dns_lookup_realm = false

[appdefaults]

pam = {

external = true

krb4_convert = false

krb4_convert_524 = false

krb4_use_as_req = false

}

[domain_realm]

.cern.ch = CERN.CH

[realms]

CERN.CH = {

default_domain = cern.ch

kpasswd_server = cerndc.cern.ch

admin_server = cerndc.cern.ch

kdc = cerndc.cern.ch

dns_lookup_kdc = false

v4_name_convert = {

host = {

rcmd = host

}

}

}