[libdefaults] default_realm = EXAMPLE.COM default_tkt_enctypes = rc4-hmac,aes256-cts-hmac-sha1-96,aes128-cts-hmac-sha1-96 default_tgs_enctypes = rc4-hmac,aes256-cts-hmac-sha1-96,aes128-cts-hmac-sha1-96 forwardable=true [realms] EXAMPLE.COM = { kdc = dc.example.com } [domain_realm] example.com = EXAMPLE.COM .example.com = EXAMPLE.COM