[ipaclients]
ipaclient.ipadomain.com

# Disabled for auto detection
#[ipaservers]
#ipaserver.ipadomain.com

[ipaclients:vars]
# if neither ipaclient_password nor ipaclient_keytab is defined,
# the enrollement will create a OneTime Password and enroll with this OTP
# In this case ipaserver_password or ipaserver_keytab is required
#ipaclient_principal=admin
#ipaclient_password=SecretPassword123
#ipaclient_keytab=/tmp/krb5.keytab
ipaclient_principal=admin
#ipaclient_password=SecretPassword123
ipaclient_keytab=files/admin.keytab