Пример, где:
[libdefaults]
default_realm = ${DOMAIN}
udp_preference_limit = 1
dns_lookup_realm = false
dns_lookup_kdc = false
dns_canonicalize_hostname = false
rdns = false
forwardable = true
[realms]
${DOMAIN} = {
kdc = ${kdchost}
}
[domain_realm]
.${domain} = ${DOMAIN}
${domain} = ${DOMAIN}