[libdefaults]
    default_realm = ZCU.CZ
 
    default_tgs_enctypes = aes256-cts des3-hmac-sha1 des3-cbc-sha1 
    default_tkt_enctypes = aes256-cts des3-hmac-sha1 des3-cbc-sha1 
    permitted_enctypes = aes256-cts des3-hmac-sha1 des3-cbc-sha1 des-cbc-md5 des-cbc-crc

    allow_weak_crypto = yes 

    ticket_lifetime = 0d 10h 0m 0s
    renew_lifetime = 15d 0h 0m 0s
    forwardable = yes
    proxiable = no
    noaddresses = no

    dns_lookup_kdc = no
    dns_lookup_realm = no
    dns_fallback = no

[appdefaults]

# AFS-migration kit compatible options
    autologin = true
    forward = true
    forwardable = true
    encrypt = true
    renewable = true

    krb5_run_aklog = true
    krb5_aklog_path = /usr/bin/aklog

    retain_ccache = false
    afs_retain_token = false
    
    kinit = {
      	forwardable = yes
      	proxiable = no
      	no-address = no
    }
    
   telnet = {
	      forward = true
	      autologin = true
      	  encrypt = true
    }

[realms]
  ZCU.CZ = {
	      kdc = kerberos1.zcu.cz
	      kdc = kerberos2.zcu.cz
          kdc = kerberos3.zcu.cz
          admin_server = kerberos-adm.zcu.cz
	      kpasswd_server = kerberos-adm.zcu.cz:464
          default_domain = zcu.cz
    }

  W3K.ZCU.CZ = {
        kdc = hermes.w3k.zcu.cz
	    kdc = adrasteia.w3k.zcu.cz
    } 
  
  WXK.ZCU.CZ = {
        kdc = silva1.wxk.zcu.cz
        kdc = silva2.wxk.zcu.cz
        kdc = silva3.wxk.zcu.cz
    } 
  
  
  KIV.ZCU.CZ = {
	      kdc = kerberos1.kiv.zcu.cz
	      admin_server = kerberos1.kiv.zcu.cz
    }
  
  ICS.MUNI.CZ = {
	      kdc = kdccesnet.meta.zcu.cz
        kdc = kdccesnet.ics.muni.cz
        kdc = kdc1.cesnet.cz
        admin_server = kdc1.cesnet.cz
        kpasswd_server = kdc1.cesnet.cz
    }
  
  META = {
        kdc = kdccesnet.meta.zcu.cz
	      kdc = kdccesnet.ics.muni.cz
        kdc = kdc1.cesnet.cz
        kdc = sal.ruk.cuni.cz:89
        kdc = jerry.ruk.cuni.cz
        admin_server = kdc1.cesnet.cz
        kpasswd_server = kdc1.cesnet.cz
        krb525_server = kdccesnet.ics.muni.cz
        krb525_server = sirion.ics.muni.cz
    }

  ADMIN.META = {
        kdc = kdccesnet.ics.muni.cz
        admin_server = kdccesnet.ics.muni.cz
        kpasswd_server = kdccesnet.ics.muni.cz
    }

  RUK.CUNI.CZ = {
        kdc = sal.ruk.cuni.cz
        kdc = jerry.ruk.cuni.cz:89
        admin_server = sal.ruk.cuni.cz
        kpasswd_server = sal.ruk.cuni.cz
        krb524_server = sal.ruk.cuni.cz
        krb524_server = jerry.ruk.cuni.cz:89
    }

  EINFRA = {
        kdc = kdccesnet.meta.zcu.cz
	      kdc = kdc1.cesnet.cz
        kdc = kdccesnet.ics.muni.cz
        admin_server = kdc1.cesnet.cz
    }
  
  EINFRA-SERVICES = {
	      kdc = kdccesnet.meta.zcu.cz
        kdc = kdc1.cesnet.cz
        kdc = kdccesnet.ics.muni.cz
        admin_server = kdc1.cesnet.cz
    }

  EGI = {
	      kdc = kdccesnet.meta.zcu.cz
        kdc = kdc1.cesnet.cz
        kdc = kdccesnet.ics.muni.cz
        admin_server = kdc1.cesnet.cz
    }

  SAGRID = {
       kdc = kdc1.cesnet.cz
       admin_server = kdc1.cesnet.cz
    }

[domain_realm]

       kdccesnet.ics.muni.cz = META
       erebor.ics.muni.cz = META
       acharon.ruk.cuni.cz = META
       androth.zcu.cz = ICS.MUNI.CZ
       atlases.muni.cz = ICS.MUNI.CZ
       ui2.grid.cesnet.cz = EINFRA-SERVICES
       ui1.egee.cesnet.cz = EINFRA-SERVICES
       ui1.grid.cesnet.cz = EINFRA-SERVICES
       kdc1.cesnet.cz = EINFRA-SERVICES

       .zcu.cz = ZCU.CZ

       .w3k.zcu.cz = W3K.ZCU.CZ
        w3k.zcu.cz = W3K.ZCU.CZ
     
       .wxk.zcu.cz = WXK.ZCU.CZ
        wxk.zcu.cz = WXK.ZCU.CZ
     
       .kiv.zcu.cz = KIV.ZCU.CZ
        kiv.zcu.cz = KIV.ZCU.CZ

       .meta.zcu.cz = META

       .ruk.cuni.cz = RUK.CUNI.CZ
       .ics.muni.cz = ICS.MUNI.CZ
       .cesnet.cz = ICS.MUNI.CZ
       .medigrid.cz = ICS.MUNI.CZ
       .video.muni.cz = ICS.MUNI.CZ
       .ncbr.muni.cz = ICS.MUNI.CZ
       .prf.jcu.cz = ICS.MUNI.CZ
       .feec.vutbr.cz = ICS.MUNI.CZ 
       .cerit-sc.cz = ICS.MUNI.CZ
       .metacentrum.cz = ICS.MUNI.CZ
       .ueb.cas.cz = ICS.MUNI.CZ
       .du1.cesnet.cz = EINFRA-SERVICES
       .du2.cesnet.cz = EINFRA-SERVICES
       .du3.cesnet.cz = EINFRA-SERVICES

       .egi.eu = META
       .fzu.cz = META


[domain_referral]
    .w3k.zcu.cz = W3K.ZCU.CZ

[capaths]
	ZCU.CZ = {
		W3K.ZCU.CZ = .
		WXK.ZCU.CZ = .
		KIV.ZCU.CZ = .
		META = .
		ADMIN.META = .
		ICS.MUNI.CZ = META
		RUK.CUNI.CZ = META
    EINFRA-SERVICES = META
	}
	W3K.ZCU.CZ = {
		ZCU.CZ = .
	}
	WXK.ZCU.CZ = {
		ZCU.CZ = .
	}
	KIV.ZCU.CZ = {
		ZCU.CZ = .
	}
	META = {
		ZCU.CZ = .
	}
	ADMIN.META = {
		ZCU.CZ = .
	}
  ICS.MUNI.CZ = {
     EINFRA-SERVICES = META
  }
  RUK.CUNI.CZ = {
     EINFRA-SERVICES = META
		 ZCU.CZ = META
  }
  EINFRA = {
     ICS.MUNI.CZ = META
  }
  EINFRA-SERVICES = {
     ICS.MUNI.CZ = META
     RUK.CUNI.CZ = META
     ZCU.CZ = META
  }

[logging]
  kdc = FILE:/var/log/krb5kdc.log
  admin_server = FILE:/var/log/kadmin.log
  default = FILE:/var/log/krb5lib.log
