Re: [Freeipa-users] Is the krb5.conf no longer used?

2016-06-02 Thread Sumit Bose
On Thu, Jun 02, 2016 at 08:29:15AM +0300, Alexander Bokovoy wrote: > On Wed, 01 Jun 2016, Geordie Grindle wrote: > > Does IPA only use ‘sssd.conf’ for kerberos authentication? Is there another > > file used to configure kerberos? > > > > I’ve built a host using Foreman and our puppet

Re: [Freeipa-users] Is the krb5.conf no longer used?

2016-06-01 Thread Alexander Bokovoy
On Wed, 01 Jun 2016, Geordie Grindle wrote: Does IPA only use ‘sssd.conf’ for kerberos authentication? Is there another file used to configure kerberos? I’ve built a host using Foreman and our puppet configuration usually pushes a krb5.conf file. However, if I delete it, everything still works

Re: [Freeipa-users] Is the krb5.conf no longer used?

2016-06-01 Thread Matrix
Hi, Geordie I think it should be optional. here is one of my IPA client's krb5.conf # cat /etc/krb5.conf #File modified by ipa-client-install includedir /var/lib/sss/pubconf/krb5.include.d/ [libdefaults] default_realm = EXAMPLE.NET dns_lookup_realm = true dns_lookup_kdc = true rdns =