[kdcdefaults]
    kdc_ports = 88

[realms]
<% @organisations.each do |organisation| %>
  <%= organisation['realm'] %> = {
        acl_file = /etc/krb5kdc/kadm5.acl
        key_stash_file = /etc/krb5kdc/stash.<%= organisation['domain'] %>
        max_life = 5d 0h 0m 0s
        max_renewable_life = 7d 0h 0m 0s
        master_key_type = aes256-cts-hmac-sha1-96
        supported_enctypes = aes256-cts-hmac-sha384-192:normal aes256-cts-hmac-sha1-96:normal aes256-cts:normal des3-hmac-sha1:normal
        default_principal_flags = +preauth
        kadmind_port = <%= organisation['kadmin_port'] %>
  }
<% end %>
