dustin/configpolicy
1
1
Fork 0
Code Issues Releases Activity

roles/kerberos: Configure mit-krb5

Browse Source 
The *kerberos* role configures the MIT Kerberos library.  Specifically,
it creates `/etc/krb5.conf` and populates it with some basic default
options. It also creates the `/etc/krb5.conf.d` directory, into which
other roles can write additional configuration files.
This commit is contained in:
Dustin
2018-01-07 11:23:36 -06:00
parent 5819b222af
commit ec524416c6
3 changed files with 29 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
roles/kerberos/templates/krb5.conf.j2 Normal file
View File

@@ -0,0 +1,14 @@
includedir /etc/krb5.conf.d/
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
dns_lookup_realm = {{ krb5_dns_lookup_realm|bool|string|lower }}
ticket_lifetime = {{ krb5_ticket_lifetime }}
renew_lifetime = {{ krb5_renew_lifetime }}
forwardable = {{ krb5_forwardable|bool|string|lower }}
rdns = {{ krb5_rdns|bool|string|lower }}
default_ccache_name = {{ krb5_default_ccache_name }}