# This file is managed by Puppet. DO NOT EDIT.
includedir /etc/krb5.conf.d/
includedir /var/lib/sss/pubconf/krb5.include.d/

[logging]
    default = FILE:/var/log/krb5libs.log
    admin_server = FILE:/var/log/kadmind.log
    kdc = FILE:/var/log/krb5kdc.log

[libdefaults]
    default_realm = VAGRANT.EXAMPLE.COM
    default_ccache_name = KEYRING:persistent:%{uid}
    dns_canonicalize_hostname = false
    dns_lookup_kdc = true
    dns_lookup_realm = false
    udp_preference_limit = 0
    forwardable = true
    rdns = false

[realms]
    VAGRANT.EXAMPLE.COM = {
        default_domain = vagrant.example.com
        kpasswd_server = vdgl0-freeipa-x01.vagrant.example.com:464
        admin_server = vdgl0-freeipa-x01.vagrant.example.com:749
        admin_server = vdgl0-freeipa-x02.vagrant.example.com:749
        kdc = vdgl0-freeipa-x01.vagrant.example.com:88
        kdc = vdgl0-freeipa-x02.vagrant.example.com:88
        pkinit_anchors = FILE:/var/lib/ipa-client/pki/kdc-ca-bundle.pem
        pkinit_pool = FILE:/var/lib/ipa-client/pki/ca-bundle.pem    
    }

[domain_realm]
    .vagrant.example.com = VAGRANT.EXAMPLE.COM
    vagrant.example.com = VAGRANT.EXAMPLE.COM
    vdgl0-freeipa-x01.vagrant.example.com = VAGRANT.EXAMPLE.COM


[dbmodules]
    VAGRANT.EXAMPLE.COM = {
        db_library = ipadb.so
    }
[plugins]
    certauth = {
        enable_only = ipakdb
        module = ipakdb:kdb/ipadb.so
    }