# {{ ansible_managed }}
includedir /var/lib/sss/pubconf/krb5.include.d/

[libdefaults]
  default_realm = {{ ipa_realm }}
  dns_lookup_realm = false
  dns_lookup_kdc = false
  rdns = false
  dns_canonicalize_hostname = false
  ticket_lifetime = 24h
  forwardable = true
  

[realms]
  {{ ipa_realm |upper }} = {
    kdc = {{ ipa_server }}:88
    master_kdc = {{ ipa_server }}:88
    admin_server = {{ ipa_server }}:749
    kpasswd_server = {{ ipa_server }}:464
    default_domain = {{ bind_localdomain }}
  }


[domain_realm]
  .{{ bind_localdomain }} = {{ ipa_realm |upper}}
  {{ bind_localdomain }} = {{ ipa_realm |upper}}

[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmin.log