Changes between Version 13 and Version 14 of howto/SquidKerberosAuthentication

Timestamp:

01/06/11 13:26:18 (15 years ago)

Author:

Edwin Eefting

Comment:

--

howto/SquidKerberosAuthentication

@@ -57 +57 @@
 {{{
 [Syn-3] root@proxy.adtest.psy.datux.nl ~# cat /etc/krb5.conf
+[libdefaults]
+      default_realm =  ADTEST.PSY.DATUX.NL
+      dns_lookup_kdc = no
+      dns_lookup_realm = no
+      default_keytab_name = /etc/krb5.keytab
+
+; for Windows 2003
+      default_tgs_enctypes = rc4-hmac des-cbc-crc des-cbc-md5
+      default_tkt_enctypes = rc4-hmac des-cbc-crc des-cbc-md5
+      permitted_enctypes = rc4-hmac des-cbc-crc des-cbc-md5
+
+; for Windows 2008 with AES
+;      default_tgs_enctypes = aes256-cts-hmac-sha1-96 rc4-hmac des-cbc-crc des-cbc-md5
+;      default_tkt_enctypes = aes256-cts-hmac-sha1-96 rc4-hmac des-cbc-crc des-cbc-md5
+;      permitted_enctypes = aes256-cts-hmac-sha1-96 rc4-hmac des-cbc-crc des-cbc-md5
+;
+; for MIT/Heimdal kdc no need to restrict encryption type
+
+[realms]
+       ADTEST.PSY.DATUX.NL = {
+              kdc = w2k3-edwin.adtest.psy.datux.nl 
+              admin_server = w2k3-edwin.adtest.psy.datux.nl 
+      }
+
+[domain_realm]
+      .adtest.psy.datux.nl =  ADTEST.PSY.DATUX.NL
+      adtest.psy.datux.nl =  ADTEST.PSY.DATUX.NL
+
 [logging]
- default = FILE:/var/log/krb5libs.log
- kdc = FILE:/var/log/krb5kdc.log
- admin_server = FILE:/var/log/kadmind.log
-
-[libdefaults]
- default_realm = ADTEST.PSY.DATUX.NL
- dns_lookup_realm = false
- dns_lookup_kdc = false
- ticket_lifetime = 24h
-
-# For Windows XP:
- default_tgs_enctypes = rc4-hmac des-cbc-crc des-cbc-md5
- default_tkt_enctypes = rc4-hmac des-cbc-crc des-cbc-md5
- permitted_enctypes = rc4-hmac des-cbc-crc des-cbc-md5
-
-# For Windows 2007:
-# default_tgs_enctypes = aes256-cts-hmac-sha1-96 rc4-hmac des-cbc-crc des-cbc-md5
-# default_tkt_enctypes = aes256-cts-hmac-sha1-96 rc4-hmac des-cbc-crc des-cbc-md5
-# permitted_enctypes = aes256-cts-hmac-sha1-96 rc4-hmac des-cbc-crc des-cbc-md5
- forwardable = yes
-
-[realms]
- ADTEST.PSY.DATUX.NL = {
-  kdc = 192.168.13.13:88
-  admin_server = 192.168.13.13:7491
-  default_domain = adtest.psy.datux.nl
- }
-
-[domain_realm]
- .adtest.psy.datux.nl = ADTEST.PSY.DATUX.NL
- adtest.psy.datux.nl = ADTEST.PSY.DATUX.NL
-
-[appdefaults]
- pam = {
-   debug = false
-   ticket_lifetime = 36000
-   renew_lifetime = 36000
-   forwardable = true
-   krb4_convert = false
-}
+  kdc = FILE:/var/log/kdc.log
+  admin_server = FILE:/var/log/kadmin.log
+  default = FILE:/var/log/krb5lib.log
 
 }}}