[kdcdefaults]
    kdc_ports = 750,88

[realms]
    <%= node['krb5']['libdefaults']['default_realm'] %> = {
        database_name = /var/lib/krb5kdc/principal
        admin_keytab = FILE:/etc/krb5kdc/kadm5.keytab
        acl_file = /etc/krb5kdc/kadm5.acl
        key_stash_file = /etc/krb5kdc/stash
        kdc_ports = 750,88
        max_life = 10h 0m 0s
        max_renewable_life = 7d 0h 0m 0s
        #master_key_type = des3-hmac-sha1
        master_key_type = aes256-cts
        #supported_enctypes = aes256-cts:normal arcfour-hmac:normal des3-hmac-sha1:normal des-cbc-crc:normal des:normal des:v4 des:norealm des:onlyrealm des:afs3
        supported_enctypes = aes256-cts:normal aes128-cts:normal arcfour-hmac:normal
        # NOT RECOMMENDED:
        # for KSSL (Kerberized SSL) on JDK 6 (http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6946669)
        #supported_enctypes = aes256-cts:normal aes128-cts:normal arcfour-hmac:normal des-cbc-crc:normal des-cbc-md5:normal
        default_principal_flags = +preauth
    }
