kerberos

# cat /etc/krb5.conf
[logging]
default = FILE:/var/log/klog_kerberos5
kdc = FILE:/var/log/klog_kdc
admin_server = FILE:/var/log/klog_serveradmin

[libdefaults]
  default_realm = MAINCOMPANY.GL.LOCAL
  ticket_lifetime = 24000
  dns_lookup_realm = false
  dns_lookup_kdc = false
  krb4_config = /etc/krb.conf
  krb4_realms = /etc/krb.realms
  kdc_timesync = 1
  ccache_type = 4
  forwardable = true
  proxiable = true
  v4_instance_resolve = false
  v4_name_convert = {
                        host = {
                        rcmd = host
                        ftp = ftp
                                }
                        plain = {
                        something = something-else
                                }
                    }


[domain_realm]
        MAINCOMPANY.gl.local = MAINCOMPANY.GL.LOCAL
        .MAINCOMPANY.gl.local = MAINCOMPANY.GL.LOCAL
        partners.gl.local = PARTNERS.GL.LOCAL
        .partners.gl.local = PARTNERS.GL.LOCAL
        SUBCOMPANY1.gl.local = SUBCOMPANY1.GL.LOCAL
        .SUBCOMPANY1.gl.local = SUBCOMPANY1.GL.LOCAL
        SUBCOMPANY2.gl.local = SUBCOMPANY2.GL.LOCAL
        .SUBCOMPANY2.gl.local = SUBCOMPANY2.GL.LOCAL
        SUBDOMAIN1MAINCOMPANY.gl.local = SUBDOMAIN1MAINCOMPANY.GL.LOCAL
        .SUBDOMAIN1MAINCOMPANY.gl.local = SUBDOMAIN1MAINCOMPANY.GL.LOCAL


[realms]
MAINCOMPANY.GL.LOCAL = {
   kdc = DC_1.MAINCOMPANY.gl.local:88 DC_3.MAINCOMPANY.gl.local:88 DC_2.MAINCOMPANY.gl.local:88
   admin_server = DC_1.MAINCOMPANY.gl.local:749 DC_3.MAINCOMPANY.gl.local:749 DC_2.MAINCOMPANY.gl.local:749
   default_domain = MAINCOMPANY.GL.LOCAL
        }
PARTNERS.GL.LOCAL = {
   kdc = DC_6.partners.gl.local:88
   admin_server = DC_6.partners.gl.local:749
   default_domain = PARTNERS.GL.LOCAL
        }
SUBCOMPANY1.GL.LOCAL = {
   kdc = DC_11.SUBCOMPANY1.gl.local:88
   admin_server = DC_11.SUBCOMPANY1.gl.local:749
   default_domain = SUBCOMPANY1.GL.LOCAL
        }
SUBCOMPANY2.GL.LOCAL = {
   kdc = DC_4.SUBCOMPANY2.gl.local:88
   admin_server = DC_4.SUBCOMPANY2.gl.local:749
   default_domain = SUBCOMPANY2.GL.LOCAL
        }
SUBDOMAIN1MAINCOMPANY.GL.LOCAL = {
   kdc = DC_5.SUBDOMAIN1MAINCOMPANY.gl.local:88
   admin_server = DC_5.SUBDOMAIN1MAINCOMPANY.gl.local:749
   default_domain = SUBDOMAIN1MAINCOMPANY.GL.LOCAL
        }

[login]
        krb4_convert = true
        krb4_get_tickets = true