krb5.conf

[libdefaults]
	default_realm = HEINZ.ORG
	noaddress = true
	dns_lookup_realm = false
 	ticket_lifetime = 24h
 	renew_lifetime = 7d
 	forwardable = true
 	rdns = false
	default_realm = HEINZ.ORG
 	#default_ccache_name = KEYRING:persistent:%{uid}
	#default_tgs_enctypes = des3-hmac-sha1:normal
        #default_tkt_enctypes = des3-hmac-sha1:normal
        #permitted_enctypes = des-cbc-md5 des-cbc-crc

	# default_tgs_enctypes = aes256-cts arcfour-hmac-md5 des3-hmac-sha1 des-cbc-crc des-cbc-md5
	#default_tgs_enctypes = des3-hmac-sha1 des-cbc-crc des-cbc-md5

	# default_tkt_enctypes = aes256-cts arcfour-hmac-md5 des3-hmac-sha1 des-cbc-crc des-cbc-md5
	#default_tkt_enctypes = des3-hmac-sha1 des-cbc-crc des-cbc-md5

	# permitted_enctypes = aes256-cts arcfour-hmac-md5 des3-hmac-sha1 des-cbc-crc des-cbc-md5
	#permitted_enctypes = des3-hmac-sha1 des-cbc-crc des-cbc-md5

[realms]
	HEINZ.ORG = {
		kdc = linux91.heinz.org:88
		admin_server = linux91.heinz.org
		default_domain = heinz.org
		#supported_enctype = rc4-hmac arcfour-hmac rc4-hmac:normal rc4-hmac-exp:normal arcfour-hmac arcfour-hmac-exp des-cbc-crc des-cbc-md5
		#supported_enctypes = aes256-cts:normal aes128-cts:normal des3-hmac-sha1:normal arcfour-hmac:normal des-hmac-sha1:normal des-cbc-md5:normal des-cbc-crc:normal
	}

[domain_realm]
	heinz.org = HEINZ.ORG
	.heinz.org = HEINZ.ORG