## Managed by Chef
[logging]
 default = FILE:/var/log/krb5libs.log
 kdc = FILE:/var/log/krb5kdc.log
 admin_server = FILE:/var/log/kadmind.log

[libdefaults]
 default_realm = HI.LOCAL
 dns_lookup_realm = false
 dns_lookup_kdc = false

[realms]
 HI.LOCAL = {
  kdc = ro.kdc.hi.local:88
  kdc = rw.kdc.hi.local:88
  admin_server = rw.kdc.hi.local:749
  default_domain = hi.local
  auth_to_local = RULE:[2:$2@$0](^super@HI.LOCAL$)s/^.*$/root/
  ## 3L ##
  auth_to_local = RULE:[2:$2@$0](^3L@HI.LOCAL$)s/^.*$/root/
  ## 2L ##
  auth_to_local = RULE:[2:$2@$0](^2L@HI.LOCAL$)s/^.*$/support/
  ## sre ##
  auth_to_local = RULE:[2:$2@$0](^sre@HI.LOCAL$)s/^.*$/root/
  ## Single user access
  auth_to_local_names = {
  }
}

[domain_realm]
 .heartinternet.co.uk = HI.LOCAL
 heartinternet.co.uk = HI.LOCAL
 .hi.local = HI.LOCAL
 hi.local = HI.LOCAL

[kdc]
 profile = /var/kerberos/krb5kdc/kdc.conf

[appdefaults]
 pam = {
   debug = false
   ticket_lifetime = 36000
   renew_lifetime = 36000
   forwardable = true
   krb4_convert = false
 }