277c4c9fdf
This enables the puppet module to optionally create a minimal kerberos configuration. This is specially useful when running novajoin inside a container, since when running with SELinux enabled, we sometimes cannot load the the kerberos configuration from the host due to some includes pointing to /var/lib. Change-Id: I554125fd6b48e620370f9e3a6061bbdc1d55b0ae
20 lines
518 B
Plaintext
20 lines
518 B
Plaintext
[libdefaults]
|
|
default_realm = <%= @ipa_realm_real %>
|
|
dns_lookup_realm = false
|
|
dns_lookup_kdc = false
|
|
rdns = false
|
|
ticket_lifetime = 24h
|
|
forwardable = yes
|
|
udp_preference_limit = 0
|
|
|
|
[realms]
|
|
<%= @ipa_realm_real %> = {
|
|
kdc = <%= @ipa_hostname %>:88
|
|
master_kdc = <%= @ipa_hostname %>:88
|
|
admin_server = <%= @ipa_hostname %>:749
|
|
default_domain = <%= @ipa_domain_real %>
|
|
}
|
|
[domain_realm]
|
|
.<%= @ipa_domain_real %> = <%= @ipa_realm_real %>
|
|
<%= @ipa_domain_real %> = <%= @ipa_realm_real %>
|