includedir /var/lib/sss/pubconf/krb5.include.d/

[logging]
 default = FILE:/var/log/krb5libs.log
 kdc = FILE:/var/log/krb5kdc.log
 admin_server = FILE:/var/log/kadmind.log

[libdefaults]
 default_realm = AYOUNG.TEST
 dns_lookup_realm = false
 dns_lookup_kdc = true
 rdns = false
 ticket_lifetime = 24h
 forwardable = yes
 udp_preference_limit = 0
 default_ccache_name = KEYRING:persistent:%{uid}

[realms]
 AYOUNG.TEST = {
  kdc = ipa.ayoung.test:88
  master_kdc = ipa.ayoung.test:88
  admin_server = ipa.ayoung.test:749
  default_domain = ayoung.test
  pkinit_anchors = FILE:/etc/ipa/ca.crt
}

[domain_realm]
 .ayoung.test = AYOUNG.TEST
 ayoung.test = AYOUNG.TEST

[dbmodules]
  AYOUNG.TEST = {
    db_library = ipadb.so
  }