Krb5.conf
From K5Wiki
/tmp/krb5_t.conf
[libdefaults] default_realm = EXAMPLE.ORG default_tkt_enctypes = des3-hmac-sha1 aes128-cts default_tgs_enctypes = des3-hmac-sha1 aes128-cts [realms] EXAMPLE.ORG = { admin_server = A.EXAMPLE.ORG default_domain = EXAMPLE.ORG kdc = %(localFQDN)s:8888 database_module = LDAP } [dbdefaults] ldap_kerberos_container_dn = "cn=krbContainer,dc=example,dc=org" [dbmodules] LDAP = { db_library = kldap ldap_kerberos_container_dn = "cn=krbContainer,dc=example,dc=org" ldap_kdc_dn = cn=admin,dc=example,dc=org ldap_kadmind_dn = cn=admin,dc=example,dc=org ldap_service_password_file = /tmp/krb5kdc/admin.stash ldap_servers = ldapi:/// } [domain_realm] [logging] kdc = FILE:/tmp/kdc_fromkrb.log default = FILE:/tmp/krb5.log admin_server = FILE:/tmp/admin.log
you can save it in /tmp/krb5.conf
[libdefaults] default_realm = EXAMPLE.ORG default_tkt_enctypes = des3-hmac-sha1 aes128-cts default_tgs_enctypes = des3-hmac-sha1 aes128-cts [realms] EXAMPLE.ORG = { admin_server = A.EXAMPLE.ORG default_domain = EXAMPLE.ORG kdc = localhost.localdomain:8888 database_module = LDAP } [dbdefaults] ldap_kerberos_container_dn = "cn=krbContainer,dc=example,dc=org" [dbmodules] LDAP = { db_library = kldap ldap_kerberos_container_dn = "cn=krbContainer,dc=example,dc=org" ldap_kdc_dn = cn=admin,dc=example,dc=org ldap_kadmind_dn = cn=admin,dc=example,dc=org ldap_service_password_file = /tmp/krb5kdc/admin.stash ldap_servers = ldapi:/// } [domain_realm] [logging] kdc = FILE:/tmp/kdc_fromkrb.log default = FILE:/tmp/krb5.log admin_server = FILE:/tmp/admin.log