1[libdefaults]
2          default_realm = TEST.H5L.SE TEST2.H5L.SE
3          no-addresses = TRUE
4          dns_lookup_realm = no
5          name_canon_rules = as-is:realm=TEST.H5L.SE
6          name_canon_rules = as-is:realm=TEST2.H5L.SE
7          name_canon_rules = as-is:realm=TEST3.H5L.SE
8          name_canon_rules = qualify:domain=test1.h5l.se:realm=TEST.H5L.SE
9          name_canon_rules = qualify:domain=test1.h5l.se:realm=TEST2.H5L.SE
10          name_canon_rules = qualify:domain=test2.h5l.se:realm=TEST2.H5L.SE
11          name_canon_rules = qualify:domain=test3.h5l.se:realm=TEST3.H5L.SE
12
13[appdefaults]
14          pkinit_anchors = FILE:@srcdir@/../../lib/hx509/data/ca.crt
15          reconnect-min = 2s
16          reconnect-backoff = 2s
17          reconnect-max = 10s
18
19[realms]
20          TEST.H5L.SE = {
21                    kdc = localhost:@port@
22                    admin_server = localhost:@admport@
23                    kpasswd_server = localhost:@pwport@
24          }
25          TEST2.H5L.SE = {
26                    kdc = localhost:@port@
27                    kpasswd_server = localhost:@pwport@
28          }
29          TEST3.H5L.SE = {
30                    kdc = localhost:@port@
31          }
32
33[domain_realm]
34          .test1.h5l.se = TEST.H5L.SE
35          .test2.h5l.se = TEST2.H5L.SE
36          .test3.h5l.se = TEST3.H5L.SE
37          localhost = TEST.H5L.SE
38
39
40[kdc]
41          enable-digest = true
42          allow-anonymous = true
43          digests_allowed = chap-md5,digest-md5,ntlm-v1,ntlm-v1-session,ntlm-v2,ms-chap-v2
44        strict-nametypes = true
45
46          enable-http = true
47
48          enable-pkinit = true
49          pkinit_identity = FILE:@srcdir@/../../lib/hx509/data/kdc.crt,@srcdir@/../../lib/hx509/data/kdc.key
50          pkinit_anchors = FILE:@srcdir@/../../lib/hx509/data/ca.crt
51          pkinit_pool = FILE:@srcdir@/../../lib/hx509/data/sub-ca.crt
52#         pkinit_revoke = CRL:@srcdir@/../../lib/hx509/data/crl1.crl
53          pkinit_mappings_file = @srcdir@/pki-mapping
54          pkinit_allow_proxy_certificate = true
55
56          database = {
57                    label = {
58                              dbname = @objdir@/current-db@kdc@
59                              realm = TEST.H5L.SE
60                              mkey_file = @objdir@/mkey.file
61                              acl_file = @srcdir@/heimdal.acl
62                              log_file = @objdir@/current@kdc@.log
63                    }
64                    label2 = {
65                              dbname = @objdir@/current-db@kdc@
66                              realm = TEST2.H5L.SE
67                              mkey_file = @objdir@/mkey.file
68                              acl_file = @srcdir@/heimdal.acl
69                              log_file = @objdir@/current@kdc@.log
70                    }
71          }
72
73          signal_socket = @objdir@/signal
74          iprop-stats = @objdir@/iprop-stats
75          iprop-acl = @srcdir@/iprop-acl
76
77[hdb]
78          db-dir = @objdir@
79
80[logging]
81          kdc = 0-/FILE:@objdir@/messages.log
82          default = 0-/FILE:@objdir@/messages.log
83
84[kadmin]
85          save-password = true
86          @dk@
87
88[capaths]
89          TEST.H5L.SE = {
90                    TEST3.H5L.SE = .
91                    TEST2.H5L.SE = .
92          }
93          TEST2.H5L.SE = {
94                    TEST.H5L.SE = .
95                    TEST3.H5L.SE = .
96          }
97          TEST3.H5L.SE = {
98                    TEST.H5L.SE = .
99                    TEST2.H5L.SE = .
100          }
101