[libdefaults]
{%if krb5_default_realm is defined%}
default_realm = {{krb5_default_realm|mandatory()}}
{%endif%}
allow_weak_crypto = false
permitted_enctypes = aes256-cts-hmac-sha1-96 camellia256-cts-cmac aes128-cts-hmac-sha1-96 camellia128-cts-cmac
default_tkt_enctypes = aes256-cts-hmac-sha1-96 camellia256-cts-cmac aes128-cts-hmac-sha1-96 camellia128-cts-cmac
default_tgs_enctypes = aes256-cts-hmac-sha1-96 camellia256-cts-cmac aes128-cts-hmac-sha1-96 camellia128-cts-cmac

[realms]
{% for realm, cfg in krb5_realms.items() %}
{{realm}} = {
{% for key, val in cfg.items() %}
  {{key}} = {{val}}
{% endfor %}
}
{% endfor %}

[domain_realm]
{% for domain, realm in krb5_domains.items() %}
{{domain}} = {{realm}}
.{{domain}} = {{realm}}
{% endfor %}