[logging]
 default = FILE:/var/log/kerberos/krb5libs.log
 kdc = FILE:/var/log/kerberos/krb5kdc.log
 kdc = SYSLOG:DEBUG:LOCAL1
 admin_server = FILE:/var/log/kerberos/kadmind.log

[libdefaults]
 dns_lookup_realm = false
 ticket_lifetime = 24h
 renew_lifetime = 7d
 forwardable = true
 rdns = false
 default_realm = THALES.COM
 default_ccache_name = KEYRING:persistent:%{uid}

[realms]
THALES.COM = {
  kdc = kdc.jakobi.fr
  admin_server = kdc.jakobi.fr
  pkinit_anchors = FILE:/var/kerberos/krb5kdc/cacert.pem
  pkinit_identities = FILE:/var/kerberos/krb5kdc/kdccert.pem, /var/kerberos/krb5kdc/kdckey.pem
 }

[domain_realm]
 .jakobi.fr = THALES.COM
 jakobi.fr = THALES.COM