Maintenance: GitLab GKE platform upgrade and software upgrade on Friday Oct. 22 at 9 p.m. Service may not be available between 9 p.m. and 9:20 p.m.

Verified Commit 7db97875 authored by Adam Lewenberg's avatar Adam Lewenberg
Browse files

fix a few more things in kerb5_conf template file

parent 119decac
...@@ -14,7 +14,7 @@ ...@@ -14,7 +14,7 @@
# you want the client to be able to connect to services where the service # you want the client to be able to connect to services where the service
# name's IP address PTR record may not match the hostname (e.g., for # name's IP address PTR record may not match the hostname (e.g., for
# services running in Amazon Web Services). # services running in Amazon Web Services).
# Default: true # Default: false
# #
## ADVANCED ## ADVANCED
# #
...@@ -101,7 +101,7 @@ ...@@ -101,7 +101,7 @@
# raise an exception. # raise an exception.
define kerberos::krb5_conf ( define base::kerberos::krb5_conf (
$env = 'prod', $env = 'prod',
$realm = 'stanford.edu', $realm = 'stanford.edu',
$default_realm = 'stanford.edu', $default_realm = 'stanford.edu',
...@@ -110,7 +110,7 @@ define kerberos::krb5_conf ( ...@@ -110,7 +110,7 @@ define kerberos::krb5_conf (
$master_kdc = undef, $master_kdc = undef,
$admin_server = undef, $admin_server = undef,
$kpasswd_server = undef, $kpasswd_server = undef,
$rdns_enabled = true, $rdns_enabled = false,
$prefer_tcp = false, $prefer_tcp = false,
) { ) {
......
...@@ -122,7 +122,11 @@ ...@@ -122,7 +122,11 @@
default_domain = slac.stanford.edu default_domain = slac.stanford.edu
} }
WIN.SLAC.STANFORD.EDU = { WIN.SLAC.STANFORD.EDU = {
kdc = winmaster2.win.slac.stanford.edu kdc = dc01.slac.stanford.edu:88
kdc = dc02.slac.stanford.edu:88
kdc = dc03.slac.stanford.edu:88
master_kdc = dc01.slac.stanford.edu:88
admin_server = dc01.slac.stanford.edu
default_domain = win.slac.stanford.edu default_domain = win.slac.stanford.edu
} }
ATHENA.MIT.EDU = { ATHENA.MIT.EDU = {
...@@ -173,6 +177,8 @@ ...@@ -173,6 +177,8 @@
.oit.duke.edu = stanford.edu .oit.duke.edu = stanford.edu
win.stanford.edu = WIN.STANFORD.EDU win.stanford.edu = WIN.STANFORD.EDU
.win.stanford.edu = WIN.STANFORD.EDU .win.stanford.edu = WIN.STANFORD.EDU
atragon.stanford.edu = WIN.STANFORD.EDU
itcert.stanford.edu = WIN.STANFORD.EDU
daper.stanford.edu = IT.WIN.STANFORD.EDU daper.stanford.edu = IT.WIN.STANFORD.EDU
gsbworkspace.stanford.edu = IT.WIN.STANFORD.EDU gsbworkspace.stanford.edu = IT.WIN.STANFORD.EDU
infraappprod.stanford.edu = IT.WIN.STANFORD.EDU infraappprod.stanford.edu = IT.WIN.STANFORD.EDU
...@@ -182,8 +188,14 @@ ...@@ -182,8 +188,14 @@
workspace.stanford.edu = IT.WIN.STANFORD.EDU workspace.stanford.edu = IT.WIN.STANFORD.EDU
winuat.stanford.edu = WINUAT.STANFORD.EDU winuat.stanford.edu = WINUAT.STANFORD.EDU
.winuat.stanford.edu = WINUAT.STANFORD.EDU .winuat.stanford.edu = WINUAT.STANFORD.EDU
wst-web1-uat.stanford.edu = WINUAT.STANFORD.EDU
msweb2.stanford.edu = EX.MS.STANFORD.EDU
windows-ms.stanford.edu = EX.MS.STANFORD.EDU
nt.stanford.edu = NT.STANFORD.EDU nt.stanford.edu = NT.STANFORD.EDU
.nt.stanford.edu = NT.STANFORD.EDU .nt.stanford.edu = NT.STANFORD.EDU
ntcert1.stanford.edu = NT.STANFORD.EDU
ntweb2.stanford.edu = TYR.NT.STANFORD.EDU
windows-nt.stanford.edu = TYR.NT.STANFORD.EDU
guest.stanford.edu = GUEST.STANFORD.EDU guest.stanford.edu = GUEST.STANFORD.EDU
.guest.stanford.edu = GUEST.STANFORD.EDU .guest.stanford.edu = GUEST.STANFORD.EDU
guest-mgmt.stanford.edu = GUEST.STANFORD.EDU guest-mgmt.stanford.edu = GUEST.STANFORD.EDU
...@@ -194,6 +206,7 @@ ...@@ -194,6 +206,7 @@
guestuat-mgmt.stanford.edu = GUESTUAT.STANFORD.EDU guestuat-mgmt.stanford.edu = GUESTUAT.STANFORD.EDU
guestuatidmweb.stanford.edu = GUESTUAT.STANFORD.EDU guestuatidmweb.stanford.edu = GUESTUAT.STANFORD.EDU
.slac.stanford.edu = SLAC.STANFORD.EDU .slac.stanford.edu = SLAC.STANFORD.EDU
.win.slac.stanford.edu = WIN.SLAC.STANFORD.EDU
.isc.org = ISC.ORG .isc.org = ISC.ORG
mit.edu = ATHENA.MIT.EDU mit.edu = ATHENA.MIT.EDU
.mit.edu = ATHENA.MIT.EDU .mit.edu = ATHENA.MIT.EDU
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment