includedir /etc/krb5.conf.d/

[libdefaults]
  default_realm = {{ ipa_realm }}
  ticket_lifetime = 24h
  forwardable = true
  udp_preference_limit = 0
  rdns = false
  dns_canonicalize_hostname = false
  dns_lookup_realm = false
  dns_lookup_kdc = false

[realms]
  {{ ipa_realm }} = {
    default_domain = {{ ipa_realm | lower }}
    pkinit_anchors = FILE:/etc/ipa/ca.crt
    pkinit_pool = FILE:/etc/ipa/ca.crt
  }

[domain_realm]
  {{ env_short }}.fedoraproject.org = {{ ipa_realm }}
  .{{ env_short }}.fedoraproject.org = {{ ipa_realm }}
  {{ env_short }}.{{ datacenter }}.fedoraproject.org = {{ ipa_realm }}
  .{{ env_short }}.{{ datacenter }}.fedoraproject.org = {{ ipa_realm }}
  fasjson{{ env_suffix }}.fedoraproject.org = {{ ipa_realm }}
