[libdefaults]
	default_realm = CERN.CH
	ticket_lifetime = 25h
	renew_lifetime = 120h
	forwardable = true
	proxiable = true
	noaddresses = true
	default_tkt_enctypes = arcfour-hmac-md5 aes256-cts aes128-cts des3-cbc-sha1 des-cbc-md5 des-cbc-crc
	allow_weak_crypto = true
[realms]
	CERN.CH = {
		default_domain = cern.ch
		kpasswd_server = afskrb5m.cern.ch
		admin_server = afskrb5m.cern.ch
		kdc = cerndc.cern.ch

		v4_name_convert = {
			host = {
				rcmd = host
			}
		}
	}
	DESY.DE = {
		kdc = netra32.desy.de:88
		kdc = netra33.desy.de:88
		kdc = netra34.desy.de:88
		admin_server = netra32.desy.de
		default_domain = desy.de
	}
[domain_realm]
	.cern.ch = CERN.CH
	.desy.de = DESY.DE