Kerberos: Difference between revisions

From Q
Jump to navigation Jump to search
Tgurr (talk | contribs)
Created page with "Configuration is the same for heimdal or mit-krb5. {{File|/etc/krb5.conf| <pre> [libdefaults] ticket_lifetime = 600 default_realm = YOURDOMAIN.LOCAL [realms]..."
 
Tgurr (talk | contribs)
No edit summary
Line 9: Line 9:
[realms]
[realms]
         YOURDOMAIN.LOCAL = {
         YOURDOMAIN.LOCAL = {
        kdc = domaincontroller.yourdomain.local:88
                kdc = domaincontroller.yourdomain.local:88
        admin_server = domaincontroller.yourdomain.local:464
                admin_server = domaincontroller.yourdomain.local:464
         }
         }


Line 16: Line 16:
         .yourdomain.local = YOURDOMAIN.LOCAL
         .yourdomain.local = YOURDOMAIN.LOCAL


[kdc]
#[kdc]
        profile = /etc/krb5kdc/kdc.conf
#        profile = /etc/krb5kdc/kdc.conf
 
#
[logging]
#[logging]
        default = SYSLOG:NOTICE:DAEMON
#        default = SYSLOG:NOTICE:DAEMON
        kdc = FILE:/var/log/krb5kdc.log
#        kdc = FILE:/var/log/krb5kdc.log
        admin_server = FILE:/var/log/kadmin.log
#        admin_server = FILE:/var/log/kadmin.log
        default = FILE:/var/log/krb5lib.log
#        default = FILE:/var/log/krb5lib.log
</pre>
</pre>
}}
}}

Revision as of 14:01, 30 April 2013

Configuration is the same for heimdal or mit-krb5.

File: /etc/krb5.conf
[libdefaults]
        ticket_lifetime = 600
        default_realm = YOURDOMAIN.LOCAL

[realms]
        YOURDOMAIN.LOCAL = {
                kdc = domaincontroller.yourdomain.local:88
                admin_server = domaincontroller.yourdomain.local:464
        }

[domain_realm]
        .yourdomain.local = YOURDOMAIN.LOCAL

#[kdc]
#        profile = /etc/krb5kdc/kdc.conf
#
#[logging]
#        default = SYSLOG:NOTICE:DAEMON
#        kdc = FILE:/var/log/krb5kdc.log
#        admin_server = FILE:/var/log/kadmin.log
#        default = FILE:/var/log/krb5lib.log