From 6102736e65b3fbb469bf730104f74b36793cc2c4 Mon Sep 17 00:00:00 2001
From: Karl Kornel <akkornel@stanford.edu>
Date: Wed, 22 Jul 2015 15:25:50 -0700
Subject: [PATCH] base::kerberos: Update WIN.SLAC.STANFORD.EDU in krb5.conf

The KDCs were completely wrong, so this domain's configuration was redone.

This was requested in Remedy ticket INC000003427399.
---
 NEWS                         | 3 +++
 files/kerberos/etc/krb5.conf | 6 +++++-
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/NEWS b/NEWS
index e287344..3c1c80e 100644
--- a/NEWS
+++ b/NEWS
@@ -3,6 +3,9 @@ unreleased (TBD)
     [os] Small fix in base::os::debian to one of the systemd-related 
     syslog-filter regexes (akkornel)
 
+    [kerberos] Change the configuration for the WIN.SLAC.STANFORD.EDU domain, 
+    as per Kent Reuber (see INC000003427399) (akkornel)
+
 release/004.050 (2015-07-24)
 
     [rpm] Making available openafs-1.6.{7,8}-EL{5,6,7}.repo files 
diff --git a/files/kerberos/etc/krb5.conf b/files/kerberos/etc/krb5.conf
index e946dde..22022c8 100644
--- a/files/kerberos/etc/krb5.conf
+++ b/files/kerberos/etc/krb5.conf
@@ -111,7 +111,11 @@
         default_domain = slac.stanford.edu
     }
     WIN.SLAC.STANFORD.EDU = {
-        kdc            = winmaster2.win.slac.stanford.edu
+        kdc            = dc01.slac.stanford.edu:88
+        kdc            = dc02.slac.stanford.edu:88
+        kdc            = dc03.slac.stanford.edu:88
+        master_kdc     = dc01.slac.stanford.edu:88
+        admin_server   = dc01.slac.stanford.edu
         default_domain = win.slac.stanford.edu
     }
     ATHENA.MIT.EDU = {
-- 
GitLab