# -*- text -*-
#
#  $Id: f47d30b260e221bc6a7aad980f73cd3b91ae4263 $

#
#  Kerberos.  See doc/rlm_krb5 for minimal docs.
#
krb5 {
	keytab = /path/to/keytab
	service_principal = name_of_principle

	#
	#  The kerberos replay cache isn't needed for password verification
	#  operations, and may cause an unnecessary performance bottleneck.
	#
	cache = no
}
