These seem to be the only bits from the krb5.ini shipped with older
versions of KfW that remain useful.
Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com>
[kaduk@mit.edu: add motivation to commit message]
ticket: 7327 (new)
queue: kfw
target_version: 1.10.4
tags: pullup
[libdefaults]
default_realm = ATHENA.MIT.EDU
allow_weak_crypto = true
+
+[domain_realm]
+ .mit.edu = ATHENA.MIT.EDU
+ mit.edu = ATHENA.MIT.EDU
+ .win.mit.edu = WIN.MIT.EDU
+ win.mit.edu = WIN.MIT.EDU
+ .csail.mit.edu = CSAIL.MIT.EDU
+ csail.mit.edu = CSAIL.MIT.EDU