Added sample configs.

2025-07-01 06:58:44 +02:00 · 2024-09-23 10:31:24 -05:00
parent 815004256f
commit 1597dffbdb
35 changed files with 2181 additions and 0 deletions
--- a/Scripts/SampleConfigs/krb5.conf
+++ b/Scripts/SampleConfigs/krb5.conf
@ -0,0 +1,36 @@
+[libdefaults]
+    default_realm = EXAMPLE.COM
+    dns_lookup_realm = false
+    dns_lookup_kdc = true
+    rdns = false
+    ticket_lifetime = 24h
+    forwardable = yes
+
+[realms]
+    EXAMPLE.COM = {
+        kdc = ad.example.com
+        admin_server = ad.example.com
+        default_domain = example.com
+    }
+
+[domain_realm]
+    .example.com = EXAMPLE.COM
+    example.com = EXAMPLE.COM
+
+# Insecure: Exposing credentials in krb5.conf for automated ticket retrieval (NOT recommended)
+[login]
+    krb5_get_init_creds_keytab = false
+
+# Insecure: Plaintext credentials for AD principal
+[appdefaults]
+    kinit = {
+        principal = admin@EXAMPLE.COM
+        password = P@ssw0rd123
+    }
+
+    pam = {
+        debug = false
+        ticket_lifetime = 36000
+        renew_lifetime = 36000
+        forwardable = true
+    }