DOMAIN.COM = {

}

pam = {

           validate = true

           keytab = /etc/krb5.keytab

           banner = login

           minimum_uid = X

           addressless = X

           use_shmem = tX

           ignore_unknown_principals = X

   }

   kinit = {

           renewable = true

           forwardable= true

   }