forum.lissyara.su

Код: Выделить всё

[libdefaults]
        default_realm = MY_DOMAIN.LOCAL

[realms]
        MY_DOMAIN.LOCAL = {
                kdc = test.local //имя моего домена в сети
                admin_server = test.local //имя моего домена в сети
        }

[domain_realm]
        .my_domain.local = MY_DOMAIN.LOCAL

[logging]
        kdc = FILE:/var/log/krb5kdc.log
        admin_server = FILE:/var/log/kadmin.log
        default = FILE:/var/log/krb5lib.log

Код: Выделить всё

proxy# kinit administrator
administrator@MY_DOMAIN.LOCAL's Password:
kinit:krb5_get_init_creds: Cannot verify certificate

Код: Выделить всё

        [libdefaults]
                default_realm = DOMAIN.LOCAL
                ticket_lifetime = 360000
                forwardable = true
                proxiable = true
                dns_lookup_realm = true
                dns_lookup_kdc = true
                clockskew = 24000

        [realms]
                DOMAIN.LOCAL = {
                        kdc = server.domain.local:88
                        admin_server = server.domain.local
                        default_domain = domain.local
                }
        [domain_realms]
                .domain.local = DOMAIN.LOCAL
                 domain.local = DOMAIN.LOCAL

        [appdefaults]
                pam = {
                debug = false
                ticket_lifetime = 360000
                renew_lifetime = 360000
                forwardable = true
                krb4_convert = false
                }

Код: Выделить всё

# kinit -p Admin
# klist