[libdefaults]
	default_realm = CIT.CORNELL.EDU
	allow_weak_crypto=true
	forwardable = true
	proxiable = true
	noaddresses = true
	ticket_lifetime = 30d
	renew_lifetime = 30d

[realms]
	CIT.CORNELL.EDU = {
		kdc = kerberos.cit.cornell.edu:88
		kdc = kerberos2.cit.cornell.edu:88
		admin_server = kerberos.cit.cornell.edu
		default_domain = cit.cornell.edu
	}

	CNF.CORNELL.EDU = {
		kdc = hole.cnf.cornell.edu:88
		kdc = smoke.cnf.cornell.edu:88
		kdc = mist.cnf.cornell.edu:88
		admin_server = hole.cnf.cornell.edu
		default_domain = cnf.cornell.edu
	}
	GUESTX.CORNELL.EDU = {
		kdc = jade.cit.cornell.edu:88
		admin_server = jade.cit.cornell.edu
		default_domain = guestx.cornell.edu
	}
	GUEST.CORNELL.EDU = {
		kdc = obsidian1.cit.cornell.edu:88
		kdc = obsidian2.cit.cornell.edu:88
		admin_server = obsidian1.cit.cornell.edu
		default_domain = guest.cornell.edu
	}

[domain_realm]
	.cit.cornell.edu = CIT.CORNELL.EDU
	cit.cornell.edu = CIT.CORNELL.EDU
	.mail.cornell.edu = CIT.CORNELL.EDU
	mail.cornell.edu = CIT.CORNELL.EDU
	.cnf.cornell.edu = CNF.CORNELL.EDU
	cnf.cornell.edu = CNF.CORNELL.EDU

[login]
	krb4_convert = false
	krb4_get_tickets = false

[capaths]
	CIT.CORNELL.EDU = {
		CNF.CORNELL.EDU = .
	}
	CNF.CORNELL.EDU = {
		CIT.CORNELL.EDU = .
	}