Install and configure kerberos krb5 on CentOS Linux.
Parameter defaults are in krb5::params
Hiera parameters reside in 3 hashes, krb5::options - for libdefaults, appdefaults, logging krb5::realms - definition of realm specific parameters krb5::domain_realm - mapping of domains to realms
Hiera example:
krb5::options:
libdefaults:
default_realm: 'EXAMPLE.COM'
rdns: false
appdefaults:
telnet
'EXAMPLE.COM':
'option1': 'value1',
'option2': 'value2'
logging:
default: 'FILE:/var/log/krb5libs.log'
kdc: 'FILE:/var/log/krb5kdc.log'
admin_server: 'FILE:/var/log/kadmind.log'
krb5::realms:
- EXAMPLE.COM:
note the indent, must be 4 spaces under realm name
domain: 'example.com'
admin_server: 'ad1.example.com'
kpasswd_server: 'kdc.example.com'
kdc:
- 'kdc1.example.com'
- 'kdc2.example.com'
- ANOTHER.COM:
domain: 'another.com'
krb5::domain_realm:
'.example.com': 'EXAMPLE.COM'
'example.com': 'EXAMPLE.COM'
'.another.com': 'ANOTHER.COM'
'another.com': 'ANOTHER.COM'
Used by the 'krb5' module's init manifest.
class { 'krb5': }
- or -
include krb5