From cc288603ce67ccca3625d162fadc618df5fbc807 Mon Sep 17 00:00:00 2001 From: Andrew Tridgell Date: Tue, 28 Sep 2010 19:11:34 -0700 Subject: s4-provision: simplify our generated krb5.conf we don't want to force the KDC to be ourselves, we should be using DNS to find a live KDC. Also remove some other options and allow the krb5 lib to use defaults. Pair-Programmed-With: Andrew Bartlett --- source4/setup/krb5.conf | 15 +-------------- 1 file changed, 1 insertion(+), 14 deletions(-) diff --git a/source4/setup/krb5.conf b/source4/setup/krb5.conf index bb8df03971..b1bf6cf907 100644 --- a/source4/setup/krb5.conf +++ b/source4/setup/krb5.conf @@ -1,17 +1,4 @@ [libdefaults] default_realm = ${REALM} - dns_lookup_realm = true + dns_lookup_realm = false dns_lookup_kdc = true - ticket_lifetime = 24h - forwardable = yes - -[realms] - ${REALM} = { - kdc = ${HOSTNAME}.${DNSDOMAIN}:88 - admin_server = ${HOSTNAME}.${DNSDOMAIN}:749 - default_domain = ${DNSDOMAIN} - } - -[domain_realm] - .${DNSDOMAIN} = ${REALM} - ${DNSDOMAIN} = ${REALM} -- cgit