#
# krb5.conf
#
[libdefaults]
        default_realm = YOUR.DOMAIN.CH
	default_checksum = rsa-md5

# domainX.controller is the name of the active directory server(s) acting as
# the KDC(s) in your windows network
[realms]
        YOUR.DOMAIN.COM = {
                kdc = domain1.controller.ch
		kdc = domain2.controller.ch
        }

[domain_realm]
	.your.domain.ch = YOUR.DOMAIN.CH

[logging]
        default = CONSOLE
	kdc_rotate = {
# How often to rotate kdc.log. Logs will get rotated no more
# often than the period, and less often if the KDC is not used
# frequently.
		period = 1d

# how many versions of kdc.log to keep around (kdc.log.0, kdc.log.1, ...)
		versions = 10
	}

[appdefaults]
	kinit = {
		renewable = true
		forwardable = true
	}