[libdefaults]
    ticket_lifetime = 86400
    default_realm = @@@REALM_UCNAME@@@

[appdefaults]
    pkinit_anchors = FILE:@@@KRBPKIPEMFILE@@@

[realms]
    @@@REALM_UCNAME@@@ = {
        kdc = @@@KDCSERVER@@@:@@@KDCPORT@@@
        admin_server = @@@ADMINSERVER@@@:@@@ADMINPORT@@@
        pkinit_require_eku = @@@PKINIT_REQUIRE_EKU@@@
        pkinit_require_krbtgt_otherName = @@@PKINIT_REQUIRE_KRBTGT_OTHERNAME@@@
        win2k_pkinit = @@@WIN2K_PKINIT@@@
        win2k_pkinit_require_binding = @@@WIN2K_PKINIT_REQUIRE_BINDING@@@
   }

[domain_realm]
    @@@REALM_LCNAME@@@ = @@@REALM_UCNAME@@@
    .@@@REALM_LCNAME@@@ = @@@REALM_UCNAME@@@

[logging]
    kdc = FILE:/var/log/krb5kdc.log
    admin_server = FILE:/var/log/kadmin.log
    default = FILE:/var/log/krb5lib.log