tests/kdc/krb5.conf.in

   1 # $Id$
   2
   3 [libdefaults]
   4         default_realm = TEST.H5L.SE TEST2.H5L.SE
   5         no-addresses = TRUE
   6         allow_weak_crypto = @WEAK@
   7
   8 [appdefaults]
   9         pkinit_anchors = FILE:@srcdir@/../../lib/hx509/data/ca.crt
  10         reconnect-min = 2s
  11         reconnect-backoff = 2s
  12         reconnect-max = 10s
  13
  14 [realms]
  15         TEST.H5L.SE = {
  16                 kdc = localhost:@port@
  17                 admin_server = localhost:@admport@
  18                 kpasswd_server = localhost:@pwport@
  19         }
  20         SUB.TEST.H5L.SE = {
  21                 kdc = localhost:@port@
  22         }
  23         TEST2.H5L.SE = {
  24                 kdc = localhost:@port@
  25                 kpasswd_server = localhost:@pwport@
  26         }
  27         TEST3.H5L.SE = {
  28                 kdc = localhost:@port@
  29         }
  30         TEST4.H5L.SE = {
  31                 kdc = localhost:@port@
  32         }
  33
  34 [domain_realm]
  35         .test.h5l.se = TEST.H5L.SE
  36         .sub.test.h5l.se = SUB.TEST.H5L.SE
  37         .example.com = TEST2.H5L.SE
  38         localhost = TEST.H5L.SE
  39
  40
  41 [kdc]
  42         enable-digest = true
  43         allow-anonymous = true
  44         digests_allowed = chap-md5,digest-md5,ntlm-v1,ntlm-v1-session,ntlm-v2,ms-chap-v2
  45
  46         enable-pkinit = true
  47         pkinit_identity = FILE:@srcdir@/../../lib/hx509/data/kdc.crt,@srcdir@/../../lib/hx509/data/kdc.key
  48         pkinit_anchors = FILE:@srcdir@/../../lib/hx509/data/ca.crt
  49         pkinit_pool = FILE:@srcdir@/../../lib/hx509/data/sub-ca.crt
  50 #       pkinit_revoke = CRL:@srcdir@/../../lib/hx509/data/crl1.crl
  51         pkinit_mappings_file = @srcdir@/pki-mapping
  52         pkinit_allow_proxy_certificate = true
  53
  54         database = {
  55                 label = {
  56                         dbname = @objdir@/current-db@kdc@
  57                         realm = TEST.H5L.SE
  58                         mkey_file = @objdir@/mkey.file
  59                         acl_file = @srcdir@/heimdal.acl
  60                         log_file = @objdir@/current@kdc@.log
  61                 }
  62                 label2 = {
  63                         dbname = @objdir@/current-db@kdc@
  64                         realm = TEST2.H5L.SE
  65                         mkey_file = @objdir@/mkey.file
  66                         acl_file = @srcdir@/heimdal.acl
  67                         log_file = @objdir@/current@kdc@.log
  68                 }
  69         }
  70
  71         signal_socket = @objdir@/signal
  72         iprop-stats = @objdir@/iprop-stats
  73         iprop-acl = @srcdir@/iprop-acl
  74
  75 [logging]
  76         kdc = 0-/FILE:@objdir@/messages.log
  77         default = 0-/FILE:@objdir@/messages.log
  78
  79 [kadmin]
  80         save-password = true
  81         @dk@
  82
  83 [capaths]
  84         TEST.H5L.SE = {
  85                 TEST3.H5L.SE = TEST2.H5L.SE
  86         }
  87         TEST.H5L.SE = {
  88                 TEST4.H5L.SE = TEST2.H5L.SE
  89                 TEST4.H5L.SE = TEST3.H5L.SE
  90         }