etc_krb5.conf

#File modified by ipa-client-install

includedir /var/lib/sss/pubconf/krb5.include.d/

[libdefaults]
  default_realm = IPA.EXAMPLE.COM
  dns_lookup_realm = true
  dns_lookup_kdc = true
  rdns = false
  ticket_lifetime = 24h
  forwardable = yes
  udp_preference_limit = 0
  default_ccache_name = KEYRING:persistent:%{uid}


[realms]
  IPA.EXAMPLE.COM = {
    pkinit_anchors = FILE:/etc/ipa/ca.crt
  auth_to_local = RULE:[1:$1@$0](^.*@EXAMPLE.COM$)s/@EXAMPLE.COM/@example.com/
  auth_to_local = RULE:[1:$1@$0](^.*@IPA.EXAMPLE.COM$)s/@IPA.EXAMPLE.COM/@ipa.example.com/
  auth_to_local = RULE:[1:$1@$0](^.*@NEW.EXAMPLE.COM$)s/@NEW.EXAMPLE.COM/@new.example.com/
  auth_to_local = RULE:[1:$1@$0](^.*@LEGACY.EXAMPLE.ORG$)s/@LEGACY.EXAMPLE.ORG/@legacy.example.org/
  auth_to_local = DEFAULT
  }


[domain_realm]
  .IPA.EXAMPLE.COM = IPA.EXAMPLE.COM
  IPA.EXAMPLE.COM = IPA.EXAMPLE.COM
  .linux.example.com = IPA.EXAMPLE.COM
  linux.example.com = IPA.EXAMPLE.COM