[logging]
 default = FILE:/var/log/krb5/krb5libs.log
 kdc = FILE:/var/log/krb5/krb5kdc.log
 admin_server = FILE:/var/log/krb5/kadmind.log

[libdefaults]
 default_realm = DOMAIN.LOC
 clockskew = 300
 dns_lookup_realm = false
 dns_lookup_kdc = false
 ticket_lifetime = 24h
 renew_lifetime = 7d
 forwardable = true
 default_keytab_name = /etc/squid/HTTP7.keytab

 ; for Windows 2003
 default_tgs_enctypes = rc4-hmac des-cbc-crc des-cbc-md5
 default_tkt_enctypes = rc4-hmac des-cbc-crc des-cbc-md5
 permitted_enctypes = rc4-hmac des-cbc-crc des-cbc-md5

[realms]
 DOMAIN.LOC = {
    kdc = 192.168.0.1
    admin_server = 192.168.0.1
    default_domain = domain.loc
 }

[domain_realm]
 .myorganization.nsk.su = DOMAIN.LOC
 myorganization.nsk.su = DOMAIN.LOC
 .domain.loc = DOMAIN.LOC
 domain.loc = DOMAIN.LOC
 .DOMAIN.LOC = DOMAIN.LOC
 DOMAIN.LOC = DOMAIN.LOC

[appdefaults]
pam = {
ticket_lifetime = 1d
renew_lifetime = 1d
forwardable = true
proxiable = false
retain_after_close = false
minimum_uid = 1
use_shmem = sshd
}