[logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] default_realm = B.DOMAIN.ORG dns_lookup_realm = false dns_lookup_kdc = false ticket_lifetime = 24h renew_lifetime = 7d forwardable = true [realms] B.DOMAIN.ORG = { kdc = bdc1.b.domain.org admin_server = bdc1.b.domain.org } b.domain.org = { kdc = bdc1.b.domain.org admin_server = bdc1.b.domain.org } [domain_realm] .b.domain.org = B.DOMAIN.ORG b.domain.org = B.DOMAIN.ORG