version: 1
dn: ou=config
ou: config
objectclass: top
objectclass: organizationalUnit

dn: ads-directoryServiceId=default,ou=config
objectclass: top
objectclass: ads-directoryService
ads-directoryserviceid: default
ads-dsreplicaid: 1
ads-dssyncperiodmillis: 15000
ads-dsmaxpdusize: 2000000
ads-dsallowanonymousaccess: true
ads-dsaccesscontrolenabled: false
ads-dsdenormalizeopattrsenabled: false
ads-servers: changepasswordserver
ads-servers: dns
ads-servers: httpserver
ads-servers: kerberos
ads-servers: ldapserver
ads-servers: ntp
ads-partitions: example
ads-partitions: system
ads-interceptors: aciAuthorizationInterceptor
ads-interceptors: authenticationInterceptor
ads-interceptors: collectiveAttributeInterceptor
ads-interceptors: defaultAuthorizationInterceptor
ads-interceptors: eventInterceptor
ads-interceptors: exceptionInterceptor
ads-interceptors: keyderivationinterceptor
ads-interceptors: normalizationInterceptor
ads-interceptors: operationalAttributeInterceptor
ads-interceptors: passwordpolicyinterceptor
ads-interceptors: referralInterceptor
ads-interceptors: schemaInterceptor
ads-interceptors: subentryInterceptor
ads-interceptors: triggerInterceptor
ads-enabled: true

dn: ou=servers,ads-directoryServiceId=default,ou=config
ou: servers
objectclass: organizationalUnit
objectclass: top

dn: ads-serverId=kdcServer,ou=servers,ads-directoryServiceId=default,ou=config
objectclass: top
objectclass: ads-server
objectclass: ads-dsBasedServer
objectclass: ads-kdcServer
ads-serverId: kerberosServer
description: a Kerberos server instance
ads-krbAllowableClockSkew: 1000
ads-krbEncryptionTypes: SPNEGO
ads-krbEncryptionTypes: MD5
ads-krbEncryptionTypes: SSHA
ads-krbEmptyAddressesAllowed: TRUE
ads-krbForwardableAllowed: TRUE
ads-krbPaEncTimestampRequired: TRUE
ads-krbPostdatedAllowed: TRUE
ads-krbProxiableAllowed: TRUE
ads-krbRenewableAllowed: TRUE
ads-krbKdcPrincipal: uid=admin
ads-krbMaximumRenewableLifetime: 100
ads-krbMaximumTicketLifetime: 200
ads-krbPrimaryRealm: EXAMPLE.COM
ads-krbBodyChecksumVerified: TRUE

dn: ou=transports,ads-serverId=kdcServer,ou=servers,ads-directoryServiceId=default,ou=config
ou: transports
objectclass: organizationalUnit
objectclass: top

dn: ads-transportid=ldap1,ou=transports,ads-serverId=kdcServer,ou=servers,ads-directoryServiceId=default,ou=config
ads-systemport: 10389
ads-transportenablessl: false
ads-transportbacklog: 50
ads-transportnbthreads: 8
ads-transportaddress: 0.0.0.0
ads-transportid: ldap1
objectclass: ads-transport
objectclass: ads-tcpTransport
objectclass: top
ads-enabled: true

dn: ads-transportid=ldaps,ou=transports,ads-serverId=kdcServer,ou=servers,ads-directoryServiceId=default,ou=config
ads-systemport: 10636
ads-transportenablessl: true
ads-transportaddress: localhost
ads-transportid: ldaps
objectclass: ads-transport
objectclass: ads-tcpTransport
objectclass: top
ads-enabled: true