# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements.  See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to You under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License.  You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

default_realm = <%= realm %>

[kdcdefaults]
    v4_mode = nopreauth
    kdc_ports = 0
    kdc_tcp_ports = 88 

[realms]
    <%= realm %> = {
        acl_file = <%= kdc_etc_path %>/kadm5.acl
        dict_file = /usr/share/dict/words
        admin_keytab = <%= kdc_etc_path %>/kadm5.keytab
        supported_enctypes = des3-hmac-sha1:normal arcfour-hmac:normal des-hmac-sha1:normal des-cbc-md5:normal des-cbc-crc:normal des-cbc-crc:v4 des-cbc-crc:afs3
        kdc_ports = <%= kdc_port %>
        database_name = <%= kdc_etc_path %>/principal
        key_stash_file = <%= kdc_etc_path %>/stash
        max_life = 10h 0m 0s
        max_renewable_life = 7d 0h 0m 0s
        master_key_type = des3-hmac-sha1
        default_principal_flags = +preauth
    }