crypto/dist/heimdal/tests/kdc/krb5.conf.in

   1 # $Heimdal: krb5.conf.in 21754 2007-07-31 21:13:56Z lha $
   2 # $NetBSD$
   3
   4 [libdefaults]
   5         default_realm = TEST.H5L.SE
   6         no-addresses = TRUE
   7
   8 [appdefaults]
   9         pkinit_anchors = FILE:@srcdir@/../../lib/hx509/data/ca.crt
  10
  11 [realms]
  12         TEST.H5L.SE = {
  13                 kdc = localhost:@port@
  14                 admin_server = localhost:@admport@
  15         }
  16         SUB.TEST.H5L.SE = {
  17                 kdc = localhost:@port@
  18         }
  19         TEST2.H5L.SE = {
  20                 kdc = localhost:@port@
  21         }
  22
  23 [domain_realms]
  24         .sub.test.h5l.se = SUB.TEST.H5L.SE
  25         localhost = TEST.H5L.SE
  26
  27
  28 [kdc]
  29         enable-digest = true
  30         digests_allowed = chap-md5,digest-md5,ntlm-v1,ntlm-v1-session,ntlm-v2,ms-chap-v2
  31
  32         enable-pkinit = true
  33         pkinit_identity = FILE:@srcdir@/../../lib/hx509/data/kdc.crt,@srcdir@/../../lib/hx509/data/kdc.key
  34         pkinit_anchors = FILE:@srcdir@/../../lib/hx509/data/ca.crt
  35         pkinit_pool = FILE:@srcdir@/../../lib/hx509/data/sub-ca.crt
  36 #       pkinit_revoke = CRL:@srcdir@/../../lib/hx509/data/crl1.crl
  37         pkinit_mappings_file = @srcdir@/pki-mapping
  38         pkinit_allow_proxy_certificate = true
  39
  40         database = {
  41                 dbname = @objdir@/current-db@kdc@
  42                 realm = TEST.H5L.SE
  43                 mkey_file = @objdir@/mkey.file
  44                 acl_file = @srcdir@/heimdal.acl
  45                 log_file = @objdir@/current@kdc@.log
  46         }
  47
  48         signal_socket = @objdir@/signal
  49         iprop-stats = @objdir@/iprop-stats
  50         iprop-acl = @srcdir@/iprop-acl
  51
  52 [logging]
  53         kdc = 0-/FILE:@objdir@/messages.log
  54         default = 0-/FILE:@objdir@/messages.log
  55
  56 [kadmin]
  57         save-password = true