[libdefaults]
   default_realm = EC2.INTERNAL
   dns_lookup_realm = false
   dns_lookup_kdc = false
   rdns = true
   ticket_lifetime = 24h
   forwardable = true
   udp_preference_limit = 1
   default_tkt_enctypes = aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96
   default_tgs_enctypes = aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96
   permitted_enctypes = aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96

[realms]
   EC2.INTERNAL = {
     kdc = __undefined__
     admin_server = __undefined__
   }

   __undefined__ = {
     kdc = kerberos.__undefined__
     admin_server = kerberos.__undefined__
   }

[domain_realm]
   us-west-2.compute.internal = EC2.INTERNAL
   .us-west-2.compute.internal = EC2.INTERNAL
   __undefined__ = __undefined__
   .__undefined__ = __undefined__

[logging]
   default = FILE:/var/log/krb5libs.log
   kdc = FILE:/var/log/krb5kdc.log
   admin_server = FILE:/var/log/kadmind.log