krb5.conf

[logging]
 default = FILE:/var/log/krb5libs.log
 kdc = FILE:/var/log/krb5kdc.log
 admin_server = FILE:/var/log/kadmind.log

[libdefaults]
 default_realm = DOMAINA.COM
 dns_lookup_realm = true
 dns_lookup_kdc = true
 ticket_lifetime = 24h
 forwardable = yes

[realms]
 DOMAINB.LOCAL = {
  kdc = dc-01.domainb.local:88
  admin_server = dc-01.domainb.local:749
  default_domain = domainb.local
 }
 DOMAINA.COM = {
   kdc = dc1.domaina.com:88
   kdc = dc2.domaina.com:88
   admin_server = dc1.domaina.com:749
   default_domain = domaina.com
  }

[domain_realm]
 .domainb.local = DOMAINB.LOCAL
 domainb.local = DOMAINB.LOCAL
 .domaina.com = DOMAINA.COM
  domaina.com = DOMAINA.COM

[kdc]
 profile = /var/kerberos/krb5kdc/kdc.conf

[appdefaults]
 pam = {
   debug = false
   ticket_lifetime = 36000
   renew_lifetime = 36000
   forwardable = true
   krb4_convert = false
 }