[libdefaults]
dns_lookup_realm = false
ticket_lifetime = 24h
renew_lifetime = 7d
#forwardable = true
rdns = false
default_realm = {{ domain | upper }}

[realms]
{{ domain | upper }} = {
{% for server in dns %}
  kdc = {{ server }}
{% endfor %}
}

[domain_realm]
.{{ domain }} = {{ domain | upper }}
{{ domain }} = {{ domain | upper }}