arch - krb5.conf

[libdefaults]
    default_realm 	= 	DOMAIN.LOCAL
	clockskew 	= 	300
	ticket_lifetime	=	1d
    forwardable     =       true
    proxiable       =       true
    dns_lookup_realm =      true
    dns_lookup_kdc  =       true
    allow_weak_crypto = 	true

[realms]
	DOMAIN.LOCAL = {
		kdc 	= 	tcdc1.DOMAIN.local
		kdc 	= 	tcdc2.DOMAIN.local
        admin_server = tcdc1.DOMAIN.local
		default_domain = DOMAIN.LOCAL
	}

[domain_realm]
	.DOMAIN.local = DOMAIN.LOCAL
	DOMAIN.local = DOMAIN.LOCAL
	DOMAIN	= DOMAIN.LOCAL

[appdefaults]
	pam = {
	ticket_lifetime 	= 1d
	renew_lifetime 		= 1d
	forwardable 		= true
	proxiable 		= false
	retain_after_close 	= false
	minimum_uid 		= 0
	debug 			= false
	}

[logging]
	default 		= FILE:/var/log/krb5libs.log
	kdc 			= FILE:/var/log/kdc.log
        admin_server            = FILE:/var/log/kadmind.log