# $Id$

[libdefaults]
	default_realm = TEST.H5L.SE
	no-addresses = TRUE

	plugin_dir = @objdir@ @objdir@/.libs

[appdefaults]
	pkinit_anchors = FILE:@srcdir@/../../lib/hx509/data/ca.crt

[realms]
	TEST.H5L.SE = {
		kdc = localhost:@port@
	}
	TEST2.H5L.SE = {
		kdc = localhost:@port@
		disable_pac = true
	}

[kdc]
	enable-digest = true
	allow-anonymous = true
	digests_allowed = chap-md5,digest-md5,ntlm-v1,ntlm-v1-session,ntlm-v2,ms-chap-v2
        strict-nametypes = true
        synthetic_clients = true
	enable_gss_preauth = true
	gss_mechanisms_allowed = sanon-x25519
	enable-pkinit = true
	pkinit_identity = FILE:@srcdir@/../../lib/hx509/data/kdc.crt,@srcdir@/../../lib/hx509/data/kdc.key
	pkinit_anchors = FILE:@srcdir@/../../lib/hx509/data/ca.crt
	pkinit_pool = FILE:@srcdir@/../../lib/hx509/data/sub-ca.crt
#	pkinit_revoke = CRL:@srcdir@/../../lib/hx509/data/crl1.crl
	pkinit_mappings_file = @srcdir@/pki-mapping
	pkinit_allow_proxy_certificate = true

	database = {
		dbname = @objdir@/current-db
		realm = TEST.H5L.SE
		mkey_file = @objdir@/mkey.file
                log_file = @objdir@/log.current-db.log
	}

[hdb]
	db-dir = @objdir@

[logging]
	kdc = 0-/FILE:@objdir@/messages.log
	default = 0-/FILE:@objdir@/messages.log

[kadmin]
#	default_keys = arcfour-hmac-md5:pw-salt