tests/kdc/krb5.conf.in

   1 # $Id$
   2
   3 [libdefaults]
   4         default_realm = TEST.H5L.SE
   5         no-addresses = TRUE
   6
   7 [appdefaults]
   8         pkinit_anchors = FILE:@srcdir@/../../lib/hx509/data/ca.crt
   9
  10 [realms]
  11         TEST.H5L.SE = {
  12                 kdc = localhost:@port@
  13                 admin_server = localhost:@admport@
  14         }
  15         SUB.TEST.H5L.SE = {
  16                 kdc = localhost:@port@
  17         }
  18         TEST2.H5L.SE = {
  19                 kdc = localhost:@port@
  20         }
  21
  22 [domain_realms]
  23         .sub.test.h5l.se = SUB.TEST.H5L.SE
  24         localhost = TEST.H5L.SE
  25
  26
  27 [kdc]
  28         enable-digest = true
  29         digests_allowed = chap-md5,digest-md5,ntlm-v1,ntlm-v1-session,ntlm-v2,ms-chap-v2
  30
  31         enable-pkinit = true
  32         pkinit_identity = FILE:@srcdir@/../../lib/hx509/data/kdc.crt,@srcdir@/../../lib/hx509/data/kdc.key
  33         pkinit_anchors = FILE:@srcdir@/../../lib/hx509/data/ca.crt
  34         pkinit_pool = FILE:@srcdir@/../../lib/hx509/data/sub-ca.crt
  35 #       pkinit_revoke = CRL:@srcdir@/../../lib/hx509/data/crl1.crl
  36         pkinit_mappings_file = @srcdir@/pki-mapping
  37         pkinit_allow_proxy_certificate = true
  38
  39         database = {
  40                 dbname = @objdir@/current-db@kdc@
  41                 realm = TEST.H5L.SE
  42                 mkey_file = @objdir@/mkey.file
  43                 acl_file = @srcdir@/heimdal.acl
  44                 log_file = @objdir@/current@kdc@.log
  45         }
  46
  47         signal_socket = @objdir@/signal
  48         iprop-stats = @objdir@/iprop-stats
  49         iprop-acl = @srcdir@/iprop-acl
  50
  51 [logging]
  52         kdc = 0-/FILE:@objdir@/messages.log
  53         default = 0-/FILE:@objdir@/messages.log
  54
  55 [kadmin]
  56         save-password = true