| 1 | [libdefaults] |
|---|
| 2 | default_realm = EXAMPLE.ORG |
|---|
| 3 | |
|---|
| 4 | # The following krb5.conf variables are only for MIT Kerberos. |
|---|
| 5 | krb4_config = /etc/krb.conf |
|---|
| 6 | krb4_realms = /etc/krb.realms |
|---|
| 7 | kdc_timesync = 1 |
|---|
| 8 | ccache_type = 4 |
|---|
| 9 | forwardable = true |
|---|
| 10 | proxiable = true |
|---|
| 11 | |
|---|
| 12 | # The following encryption type specification will be used by MIT Kerberos |
|---|
| 13 | # if uncommented. In general, the defaults in the MIT Kerberos code are |
|---|
| 14 | # correct and overriding these specifications only serves to disable new |
|---|
| 15 | # encryption types as they are added, creating interoperability problems. |
|---|
| 16 | |
|---|
| 17 | default_tgs_enctypes = des3-hmac-sha1 des-cbc-crc des-cbc-md5 |
|---|
| 18 | default_tkt_enctypes = des3-hmac-sha1 des-cbc-crc des-cbc-md5 |
|---|
| 19 | permitted_enctypes = des3-hmac-sha1 des-cbc-crc des-cbc-md5 |
|---|
| 20 | |
|---|
| 21 | # The following libdefaults parameters are only for Heimdal Kerberos. |
|---|
| 22 | v4_instance_resolve = false |
|---|
| 23 | v4_name_convert = { |
|---|
| 24 | host = { |
|---|
| 25 | rcmd = host |
|---|
| 26 | ftp = ftp |
|---|
| 27 | } |
|---|
| 28 | plain = { |
|---|
| 29 | something = something-else |
|---|
| 30 | } |
|---|
| 31 | } |
|---|
| 32 | fcc-mit-ticketflags = true |
|---|
| 33 | |
|---|
| 34 | [realms] |
|---|
| 35 | K5TEST.IFS.UMICH.EDU = { |
|---|
| 36 | kdc = index.ifs.umich.edu:88 |
|---|
| 37 | master_kdc = index.ifs.umich.edu:88 |
|---|
| 38 | admin_server = index.ifs.umich.edu:749 |
|---|
| 39 | } |
|---|
| 40 | CATS.UMICH.EDU = { |
|---|
| 41 | kdc = lose-the-lion.ifs.umich.edu:88 |
|---|
| 42 | master_kdc = lose-the-lion.ifs.umich.edu:88 |
|---|
| 43 | admin_server = lose-the-lion.ifs.umich.edu:749 |
|---|
| 44 | } |
|---|
| 45 | DOGS.UMICH.EDU = { |
|---|
| 46 | kdc = reservoirdogs.ifs.umich.edu:88 |
|---|
| 47 | kdc = strawdogs.ifs.umich.edu:88 |
|---|
| 48 | master_kdc = strawdogs.ifs.umich.edu:88 |
|---|
| 49 | admin_server = strawdogs.ifs.umich.edu:749 |
|---|
| 50 | } |
|---|
| 51 | WONDERFALLS.UMICH.EDU = { |
|---|
| 52 | kdc = brassmonkey.gpcc.itd.umich.edu:88 |
|---|
| 53 | admin_server = brassmonkey.gpcc.itd.umich.edu:749 |
|---|
| 54 | } |
|---|
| 55 | UMICH.EDU = { |
|---|
| 56 | kdc = kerberos-3.umich.edu:88 |
|---|
| 57 | kdc = kerberos-2.umich.edu:88 |
|---|
| 58 | kdc = kerberos-1.umich.edu:88 |
|---|
| 59 | kdc = kerberos-4.umich.edu:88 |
|---|
| 60 | admin_server = kerberos-admin.umich.edu:749 |
|---|
| 61 | } |
|---|
| 62 | ENGIN.UMICH.EDU = { |
|---|
| 63 | kdc = k5master.engin.umich.edu:88 |
|---|
| 64 | admin_server = k5master.engin.umich.edu:749 |
|---|
| 65 | } |
|---|
| 66 | |
|---|
| 67 | CITI.UMICH.EDU = { |
|---|
| 68 | kdc = kerberos.citi.umich.edu:88 |
|---|
| 69 | admin_server = kerberos.citi.umich.edu:749 |
|---|
| 70 | } |
|---|
| 71 | |
|---|
| 72 | LSA.UMICH.EDU = { |
|---|
| 73 | kdc = kdc0.lsa.umich.edu:88 |
|---|
| 74 | kdc = kdc1.lsa.umich.edu:88 |
|---|
| 75 | kdc = kdc2.lsa.umich.edu:88 |
|---|
| 76 | kdc = kdc3.lsa.umich.edu:88 |
|---|
| 77 | admin_server = kdc0.lsa.umich.edu:749 |
|---|
| 78 | } |
|---|
| 79 | |
|---|
| 80 | SPH.UMICH.EDU = { |
|---|
| 81 | kdc = kerberos.sph.umich.edu:88 |
|---|
| 82 | kdc = kerberos0.sph.umich.edu:88 |
|---|
| 83 | kdc = kerberos1.sph.umich.edu:88 |
|---|
| 84 | kdc = kerberos2.sph.umich.edu:88 |
|---|
| 85 | admin_server = kerberos.sph.umich.edu:749 |
|---|
| 86 | } |
|---|
| 87 | OPENLDAP.ORG = { |
|---|
| 88 | kdc = kerberos.openldap.org |
|---|
| 89 | admin_server = kerberos.openldap.org:749 |
|---|
| 90 | } |
|---|
| 91 | |
|---|
| 92 | ADSROOT.ITD.UMICH.EDU = { |
|---|
| 93 | kdc = dc1.adsroot.itd.umich.edu:88 |
|---|
| 94 | kdc = dc2.adsroot.itd.umich.edu:88 |
|---|
| 95 | admin_server = dc1.adsroot.itd.umich.edu:749 |
|---|
| 96 | default_domain = umich.edu |
|---|
| 97 | } |
|---|
| 98 | |
|---|
| 99 | ADSROOT.ITCS.UMICH.EDU = { |
|---|
| 100 | kdc = dc01.adsroot.itcs.umich.edu:88 |
|---|
| 101 | kdc = dc02.adsroot.itcs.umich.edu:88 |
|---|
| 102 | kdc = dc03.adsroot.itcs.umich.edu:88 |
|---|
| 103 | kdc = dc04.adsroot.itcs.umich.edu:88 |
|---|
| 104 | admin_server = dc01.adsroot.itcs.umich.edu:749 |
|---|
| 105 | default_domain = umich.edu |
|---|
| 106 | } |
|---|
| 107 | ATHENA.MIT.EDU = { |
|---|
| 108 | kdc = kerberos.mit.edu:88 |
|---|
| 109 | kdc = kerberos-1.mit.edu:88 |
|---|
| 110 | kdc = kerberos-2.mit.edu:88 |
|---|
| 111 | admin_server = kerberos.mit.edu |
|---|
| 112 | default_domain = mit.edu |
|---|
| 113 | } |
|---|
| 114 | MEDIA-LAB.MIT.EDU = { |
|---|
| 115 | kdc = kerberos.media.mit.edu |
|---|
| 116 | admin_server = kerberos.media.mit.edu |
|---|
| 117 | } |
|---|
| 118 | ZONE.MIT.EDU = { |
|---|
| 119 | kdc = casio.mit.edu |
|---|
| 120 | kdc = seiko.mit.edu |
|---|
| 121 | admin_server = casio.mit.edu |
|---|
| 122 | } |
|---|
| 123 | MOOF.MIT.EDU = { |
|---|
| 124 | kdc = three-headed-dogcow.mit.edu:88 |
|---|
| 125 | kdc = three-headed-dogcow-1.mit.edu:88 |
|---|
| 126 | admin_server = three-headed-dogcow.mit.edu |
|---|
| 127 | } |
|---|
| 128 | CSAIL.MIT.EDU = { |
|---|
| 129 | kdc = kerberos-1.csail.mit.edu |
|---|
| 130 | kdc = kerberos-2.csail.mit.edu |
|---|
| 131 | admin_server = kerberos.csail.mit.edu |
|---|
| 132 | default_domain = csail.mit.edu |
|---|
| 133 | krb524_server = krb524.csail.mit.edu |
|---|
| 134 | } |
|---|
| 135 | IHTFP.ORG = { |
|---|
| 136 | kdc = kerberos.ihtfp.org |
|---|
| 137 | admin_server = kerberos.ihtfp.org |
|---|
| 138 | } |
|---|
| 139 | GNU.ORG = { |
|---|
| 140 | kdc = kerberos.gnu.org |
|---|
| 141 | kdc = kerberos-2.gnu.org |
|---|
| 142 | kdc = kerberos-3.gnu.org |
|---|
| 143 | admin_server = kerberos.gnu.org |
|---|
| 144 | } |
|---|
| 145 | 1TS.ORG = { |
|---|
| 146 | kdc = kerberos.1ts.org |
|---|
| 147 | admin_server = kerberos.1ts.org |
|---|
| 148 | } |
|---|
| 149 | GRATUITOUS.ORG = { |
|---|
| 150 | kdc = kerberos.gratuitous.org |
|---|
| 151 | admin_server = kerberos.gratuitous.org |
|---|
| 152 | } |
|---|
| 153 | DOOMCOM.ORG = { |
|---|
| 154 | kdc = kerberos.doomcom.org |
|---|
| 155 | admin_server = kerberos.doomcom.org |
|---|
| 156 | } |
|---|
| 157 | ANDREW.CMU.EDU = { |
|---|
| 158 | kdc = vice28.fs.andrew.cmu.edu |
|---|
| 159 | kdc = vice2.fs.andrew.cmu.edu |
|---|
| 160 | kdc = vice11.fs.andrew.cmu.edu |
|---|
| 161 | kdc = vice12.fs.andrew.cmu.edu |
|---|
| 162 | admin_server = vice28.fs.andrew.cmu.edu |
|---|
| 163 | default_domain = andrew.cmu.edu |
|---|
| 164 | } |
|---|
| 165 | CS.CMU.EDU = { |
|---|
| 166 | kdc = kerberos.cs.cmu.edu |
|---|
| 167 | kdc = kerberos-2.srv.cs.cmu.edu |
|---|
| 168 | admin_server = kerberos.cs.cmu.edu |
|---|
| 169 | } |
|---|
| 170 | DEMENTIA.ORG = { |
|---|
| 171 | kdc = kerberos.dementia.org |
|---|
| 172 | kdc = kerberos2.dementia.org |
|---|
| 173 | admin_server = kerberos.dementia.org |
|---|
| 174 | } |
|---|
| 175 | stanford.edu = { |
|---|
| 176 | kdc = krb5auth1.stanford.edu |
|---|
| 177 | kdc = krb5auth2.stanford.edu |
|---|
| 178 | kdc = krb5auth3.stanford.edu |
|---|
| 179 | admin_server = krb5-admin.stanford.edu |
|---|
| 180 | default_domain = stanford.edu |
|---|
| 181 | } |
|---|
| 182 | |
|---|
| 183 | [domain_realm] |
|---|
| 184 | .umich.edu = UMICH.EDU |
|---|
| 185 | index.ifs.umich.edu = K5TEST.IFS.UMICH.EDU |
|---|
| 186 | reservoirdogs.ifs.umich.edu = DOGS.UMICH.EDU |
|---|
| 187 | strawdogs.ifs.umich.edu = DOGS.UMICH.EDU |
|---|
| 188 | lose-the-lion.ifs.umich.edu = CATS.UMICH.EDU |
|---|
| 189 | galois.ifs.umich.edu = CATS.UMICH.EDU |
|---|
| 190 | brassmonkey.gpcc.itd.umich.edu = WONDERFALLS.UMICH.EDU |
|---|
| 191 | engin.umich.edu = ENGIN.UMICH.EDU |
|---|
| 192 | .engin.umich.edu = ENGIN.UMICH.EDU |
|---|
| 193 | ummu.umich.edu = ENGIN.UMICH.EDU |
|---|
| 194 | .ummu.umich.edu = ENGIN.UMICH.EDU |
|---|
| 195 | umdl.umich.edu = ENGIN.UMICH.EDU |
|---|
| 196 | .umdl.umich.edu = ENGIN.UMICH.EDU |
|---|
| 197 | lsa.umich.edu = LSA.UMICH.EDU |
|---|
| 198 | .lsa.umich.edu = LSA.UMICH.EDU |
|---|
| 199 | sph.umich.edu = SPH.UMICH.EDU |
|---|
| 200 | .sph.umich.edu = SPH.UMICH.EDU |
|---|
| 201 | adsroot.itcs.umich.edu = ADSROOT.ITCS.UMICH.EDU |
|---|
| 202 | .adsroot.itcs.umich.edu = ADSROOT.ITCS.UMICH.EDU |
|---|
| 203 | adsroot.itd.umich.edu = ADSROOT.ITD.UMICH.EDU |
|---|
| 204 | .adsroot.itd.umich.edu = ADSROOT.ITD.UMICH.EDU |
|---|
| 205 | .mit.edu = ATHENA.MIT.EDU |
|---|
| 206 | mit.edu = ATHENA.MIT.EDU |
|---|
| 207 | .media.mit.edu = MEDIA-LAB.MIT.EDU |
|---|
| 208 | media.mit.edu = MEDIA-LAB.MIT.EDU |
|---|
| 209 | .csail.mit.edu = CSAIL.MIT.EDU |
|---|
| 210 | csail.mit.edu = CSAIL.MIT.EDU |
|---|
| 211 | .whoi.edu = ATHENA.MIT.EDU |
|---|
| 212 | whoi.edu = ATHENA.MIT.EDU |
|---|
| 213 | .stanford.edu = stanford.edu |
|---|
| 214 | |
|---|
| 215 | [login] |
|---|
| 216 | krb4_convert = true |
|---|
| 217 | krb4_get_tickets = false |
|---|