@set RANDOMHOST1 daffodil
@set RANDOMHOST1IP 10.0.0.6
@set RANDOMHOST2 trillium
-@set RANDOMHOST2IP 253.46.124.7
+@set RANDOMHOST2IP 10.1.2.3
@set RANDOMUSER johndoe
@set RANDOMUSER1 jennifer
@set RANDOMUSER2 david
-@set RELEASE 1.3
-@set PREVRELEASE 1.2
+@set RELEASE 1.10
+@set PREVRELEASE 1.9
@set INSTALLDIR /usr/@value{LCPRODUCT}
@set PREVINSTALLDIR @value{INSTALLDIR}
@set ROOTDIR /usr/local
@set BINDIR /usr/local/bin
@set LOCALSTATEDIR @value{ROOTDIR}/var
-@set SECONDDOMAIN fubar.org
-@set SECONDREALM FUBAR.ORG
+@set SECONDDOMAIN example.com
+@set SECONDREALM EXAMPLE.COM
@set UPDATED @today
@ignore
the following should be consistent with the variables set in
krb5/src/lib/krb5/krb/init_ctx.c
@end ignore
-@set DefaultETypeList des3-cbc-sha1 arcfour-hmac-md5 des-cbc-crc des-cbc-md5 des-cbc-md4
+@set DefaultETypeList aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 des3-cbc-sha1 arcfour-hmac-md5 des-cbc-crc des-cbc-md5 des-cbc-md4
@comment DEFAULT_ETYPE_LIST
@set DefaultDefaultTgsEnctypes @value{DefaultETypeList}
@set DefaultDefaultTktEnctypes @value{DefaultETypeList}
@comment libdefaults, clockskew
@set DefaultChecksumType RSA MD5
@comment libdefaults, kdc_req_checksum_type, ap_req_checksum_type, safe_checksum_type
-@set DefaultCcacheType 3
+@set DefaultCcacheType 4
@comment DEFAULT_CCACHE_TYPE
-@set DefaultCcacheTypeMac 4
-@comment DEFAULT_CCACHE_TYPE
-@set DefaultTktLifetime 10 hours
+@set DefaultTktLifetime 1 day
@comment libdefaults, tkt_lifetime
-@set DefaultKDCTimesyncMac 1
-@set DefaultKDCTimesync 0
+@comment -- actually, that's not implemented; see
+@comment lib/krb5/krb/get_in_tkt.c, and clients/kinit/kinit.c for krb4
+@comment fallback
+@set DefaultKDCTimesync 1
@comment DEFAULT_KDC_TIMESYNC
@set DefaultKDCDefaultOptions KDC_OPT_RENEWABLE_OK
@comment line 194
@ignore
the following defaults should be consistent with default variables set
-in krb5/src/include/krb5/stock/osconf.h
+in krb5/src/include/osconf.hin
@end ignore
-@set DefaultMasterKeyType des-cbc-crc
+@set DefaultMasterKeyType des3-cbc-sha1
@comment DEFAULT_KDC_ENCTYPE
@set DefaultKadmindPort 749
@comment DEFAULT_KADM5_PORT
the following defaults should be consistent with the numbers set in
krb5/src/lib/kadm5/alt_prof.c
@end ignore
-@set DefaultMaxLife 10 hours
-@comment line 608
+@set DefaultMaxLife 24 hours
+@comment max_life
@set DefaultMaxRenewableLife 0
-@comment line 622
+@comment max_rlife
@set DefaultDefaultPrincipalExpiration 0
-@comment line 639
-@set DefaultSupportedEnctypes des3-hmac-sha1:normal des-cbc-crc:normal
-@comment line 705
+@comment expiration
+@set DefaultSupportedEnctypes aes256-cts-hmac-sha1-96:normal aes128-cts-hmac-sha1-96:normal des3-cbc-sha1:normal arcfour-hmac-md5:normal
+@comment krb5/src/include/osconf.hin, KRB5_DEFAULT_SUPPORTED_ENCTYPES
@ignore
the following defaults should be consistent with the values set in
-krb5/src/include/krb5/kdb.h
+krb5/src/include/kdb.h
@end ignore
@set DefaultDefaultPrincipalFlags postdateable, forwardable, tgt-based, renewable, proxiable, dup-skey, allow-tickets, and service enabled.
@comment KRB_KDC_DEFAULT_FLAGS set to 0
@ignore
the following defaults should be consistent with the values set in
-include/krb5/kdb.h
+include/kdb.h
@end ignore
@set DefaultMasterKeyName K/M
@comment KRB5_KDB_M_NAME
@end ignore
@set DefaultKrb5GetTickets true
@comment login_krb5_get_tickets
-@set DefaultKrb4GetTickets false
-@comment login_krb4_get_tickets
-@set DefaultKrb4Convert false
-@comment login_krb4_convert
@set DefaultKrbRunAklog false
@comment login_krb_run_aklog
@set DefaultAklogPath $(prefix)/bin/aklog
@set DefaultAcceptPasswd false
@comment login_accept_password
-@ignore
-the following defaults should be consistent with the values set in
-krb5/src/kdc/kerberos_v4
-@end ignore
-@set DefaultV4Mode nopreauth
-@comment KDC_V4_DEFAULT_MODE
-
@ignore
these defaults are based on code in krb5/src/aclocal.m4
@end ignore
@set DefaultFTPPort 21
@set DefaultKrb524Port 4444
-@comment src/include/kerberosIV/krb.h
-@set DefaultKrb4Srvtab /etc/srvtab
-@comment line 131
-@set DefaultKrb4Config /etc/krb.conf
-@comment KRB_CONF
-@set DefaultKrb4Realms /etc/krb.realms
-@comment KRB_RLM_TRANS
+@comment krb5/src/lib/krb5/krb/get_in_tkt.c
+@set DefaultRenewLifetime 0
+@set DefaultNoaddresses set
+@set DefaultForwardable not set
+@set DefaultProxiable not set
+
+@comment lib/krb5/krb/vfy_increds.c
+@set DefaultVerifyApReqNofail not set
+
+@c copyright divider
+@macro cdivider
+@iftex
+@vskip 12pt
+@hrule
+@vskip 12pt
+@end iftex
+@ifinfo
+@center --------------------
+@sp 1
+@end ifinfo
+@ifhtml
+@html
+<hr>
+@end html
+@end ifhtml
+@end macro