1[libdefaults] 2 default_realm = TEST.H5L.SE TEST2.H5L.SE 3 no-addresses = TRUE 4 dns_lookup_realm = no 5 name_canon_rules = as-is:realm=TEST.H5L.SE 6 name_canon_rules = as-is:realm=TEST2.H5L.SE 7 name_canon_rules = as-is:realm=TEST3.H5L.SE 8 name_canon_rules = qualify:domain=test1.h5l.se:realm=TEST.H5L.SE 9 name_canon_rules = qualify:domain=test1.h5l.se:realm=TEST2.H5L.SE 10 name_canon_rules = qualify:domain=test2.h5l.se:realm=TEST2.H5L.SE 11 name_canon_rules = qualify:domain=test3.h5l.se:realm=TEST3.H5L.SE 12 13[appdefaults] 14 pkinit_anchors = FILE:@srcdir@/../../lib/hx509/data/ca.crt 15 reconnect-min = 2s 16 reconnect-backoff = 2s 17 reconnect-max = 10s 18 19[realms] 20 TEST.H5L.SE = { 21 kdc = localhost:@port@ 22 admin_server = localhost:@admport@ 23 kpasswd_server = localhost:@pwport@ 24 } 25 TEST2.H5L.SE = { 26 kdc = localhost:@port@ 27 kpasswd_server = localhost:@pwport@ 28 } 29 TEST3.H5L.SE = { 30 kdc = localhost:@port@ 31 } 32 33[domain_realm] 34 .test1.h5l.se = TEST.H5L.SE 35 .test2.h5l.se = TEST2.H5L.SE 36 .test3.h5l.se = TEST3.H5L.SE 37 localhost = TEST.H5L.SE 38 39 40[kdc] 41 enable-digest = true 42 allow-anonymous = true 43 digests_allowed = chap-md5,digest-md5,ntlm-v1,ntlm-v1-session,ntlm-v2,ms-chap-v2 44 strict-nametypes = true 45 46 enable-http = true 47 48 enable-pkinit = true 49 pkinit_identity = FILE:@srcdir@/../../lib/hx509/data/kdc.crt,@srcdir@/../../lib/hx509/data/kdc.key 50 pkinit_anchors = FILE:@srcdir@/../../lib/hx509/data/ca.crt 51 pkinit_pool = FILE:@srcdir@/../../lib/hx509/data/sub-ca.crt 52# pkinit_revoke = CRL:@srcdir@/../../lib/hx509/data/crl1.crl 53 pkinit_mappings_file = @srcdir@/pki-mapping 54 pkinit_allow_proxy_certificate = true 55 56 database = { 57 label = { 58 dbname = @objdir@/current-db@kdc@ 59 realm = TEST.H5L.SE 60 mkey_file = @objdir@/mkey.file 61 acl_file = @srcdir@/heimdal.acl 62 log_file = @objdir@/current@kdc@.log 63 } 64 label2 = { 65 dbname = @objdir@/current-db@kdc@ 66 realm = TEST2.H5L.SE 67 mkey_file = @objdir@/mkey.file 68 acl_file = @srcdir@/heimdal.acl 69 log_file = @objdir@/current@kdc@.log 70 } 71 } 72 73 signal_socket = @objdir@/signal 74 iprop-stats = @objdir@/iprop-stats 75 iprop-acl = @srcdir@/iprop-acl 76 77[hdb] 78 db-dir = @objdir@ 79 80[logging] 81 kdc = 0-/FILE:@objdir@/messages.log 82 default = 0-/FILE:@objdir@/messages.log 83 84[kadmin] 85 save-password = true 86 @dk@ 87 88[capaths] 89 TEST.H5L.SE = { 90 TEST3.H5L.SE = . 91 TEST2.H5L.SE = . 92 } 93 TEST2.H5L.SE = { 94 TEST.H5L.SE = . 95 TEST3.H5L.SE = . 96 } 97 TEST3.H5L.SE = { 98 TEST.H5L.SE = . 99 TEST2.H5L.SE = . 100 } 101