[kdcdefaults]

    kdc_ports = 88

    kdc_tcp_ports = 88

    spake_preauth_kdc_challenge = edwards25519

[realms]

EXAMPLE.COM = {

     #master_key_type = aes256-cts

     acl_file = /var/kerberos/krb5kdc/kadm5.acl

     dict_file = /usr/share/dict/words

     default_principal_flags = +preauth

     admin_keytab = /var/kerberos/krb5kdc/kadm5.keytab

     supported_enctypes = aes256-cts:normal aes128-cts:normal arcfour-hmac:normal camellia256-cts:normal camellia128-cts:normal

}