tests/kdc/krb5-canon2.conf.in

   1 [libdefaults]
   2         default_realm = TEST.H5L.SE TEST2.H5L.SE
   3         no-addresses = TRUE
   4         dns_lookup_realm = no
   5         name_canon_rules = as-is:realm=TEST.H5L.SE
   6         name_canon_rules = as-is:realm=TEST2.H5L.SE
   7         name_canon_rules = as-is:realm=TEST3.H5L.SE
   8         name_canon_rules = use-resolver-searchlist
   9
  10 [appdefaults]
  11         pkinit_anchors = FILE:@srcdir@/../../lib/hx509/data/ca.crt
  12         reconnect-min = 2s
  13         reconnect-backoff = 2s
  14         reconnect-max = 10s
  15
  16 [realms]
  17         TEST.H5L.SE = {
  18                 kdc = localhost:@port@
  19                 admin_server = localhost:@admport@
  20                 kpasswd_server = localhost:@pwport@
  21         }
  22         TEST2.H5L.SE = {
  23                 kdc = localhost:@port@
  24                 kpasswd_server = localhost:@pwport@
  25         }
  26         TEST3.H5L.SE = {
  27                 kdc = localhost:@port@
  28         }
  29
  30 [domain_realm]
  31         .test1.h5l.se = TEST.H5L.SE
  32         .test2.h5l.se = TEST2.H5L.SE
  33         .test3.h5l.se = TEST3.H5L.SE
  34         localhost = TEST.H5L.SE
  35
  36
  37 [kdc]
  38         enable-digest = true
  39         allow-anonymous = true
  40         digests_allowed = chap-md5,digest-md5,ntlm-v1,ntlm-v1-session,ntlm-v2,ms-chap-v2
  41
  42         enable-http = true
  43
  44         enable-pkinit = true
  45         pkinit_identity = FILE:@srcdir@/../../lib/hx509/data/kdc.crt,@srcdir@/../../lib/hx509/data/kdc.key
  46         pkinit_anchors = FILE:@srcdir@/../../lib/hx509/data/ca.crt
  47         pkinit_pool = FILE:@srcdir@/../../lib/hx509/data/sub-ca.crt
  48 #       pkinit_revoke = CRL:@srcdir@/../../lib/hx509/data/crl1.crl
  49         pkinit_mappings_file = @srcdir@/pki-mapping
  50         pkinit_allow_proxy_certificate = true
  51
  52         database = {
  53                 label = {
  54                         dbname = @objdir@/current-db@kdc@
  55                         realm = TEST.H5L.SE
  56                         mkey_file = @objdir@/mkey.file
  57                         acl_file = @srcdir@/heimdal.acl
  58                         log_file = @objdir@/current@kdc@.log
  59                 }
  60                 label2 = {
  61                         dbname = @objdir@/current-db@kdc@
  62                         realm = TEST2.H5L.SE
  63                         mkey_file = @objdir@/mkey.file
  64                         acl_file = @srcdir@/heimdal.acl
  65                         log_file = @objdir@/current@kdc@.log
  66                 }
  67         }
  68
  69         signal_socket = @objdir@/signal
  70         iprop-stats = @objdir@/iprop-stats
  71         iprop-acl = @srcdir@/iprop-acl
  72
  73 [logging]
  74         kdc = 0-/FILE:@objdir@/messages.log
  75         default = 0-/FILE:@objdir@/messages.log
  76
  77 [kadmin]
  78         save-password = true
  79         @dk@
  80
  81 [capaths]
  82         TEST.H5L.SE = {
  83                 TEST3.H5L.SE = .
  84                 TEST2.H5L.SE = .
  85         }
  86         TEST2.H5L.SE = {
  87                 TEST.H5L.SE = .
  88                 TEST3.H5L.SE = .
  89         }
  90         TEST3.H5L.SE = {
  91                 TEST.H5L.SE = .
  92                 TEST2.H5L.SE = .
  93         }