#
# /var/kerberos/krb5kdc/kdc.conf (0600): server KDC configuration
# 

[kdcdefaults]
 v4_mode = nopreauth

[realms]
 EXAMPLE.COM = {
  master_key_type = des3-hmac-sha1
  acl_file = /var/kerberos/krb5kdc/kadm5.acl
  dict_file = /usr/share/dict/words
  admin_keytab = /var/kerberos/krb5kdc/kadm5.keytab
  supported_enctypes = aes256-cts:normal aes128-cts:normal des3-hmac-sha1:normal arcfour-hmac:normal des-hmac-sha1:normal des-cbc-md5:normal des-cbc-crc:normal des-cbc-crc:v4 des-cbc-crc:afs3
  database_name = /var/kerberos/krb5kdc/principal
  key_stash_file = /var/kerberos/krb5kdc/.k5.EXAMPLE.COM
  max_life = 24h
  max_renewable_life = 7d
  default_principal_flags = +preauth
 }