Add default values for krb ticket policy attributes during installation.

install/share/bootstrap-template.ldif

@@ -70,6 +70,7 @@ objectClass: top
 objectClass: person
 objectClass: posixaccount
 objectClass: krbprincipalaux
+objectClass: krbticketpolicyaux
 objectClass: inetuser
 uid: admin
 krbPrincipalName: admin@$REALM
@@ -165,6 +166,7 @@ ipaUserObjectClasses: inetorgperson
 ipaUserObjectClasses: inetuser
 ipaUserObjectClasses: posixaccount
 ipaUserObjectClasses: krbprincipalaux
+ipaUserObjectClasses: krbticketpolicyaux
 ipaUserObjectClasses: radiusprofile
 ipaUserObjectClasses: ipaobject
 ipaDefaultEmailDomain: $DOMAIN

install/share/default-keytypes.ldif

@@ -11,6 +11,12 @@ krbSupportedEncSaltTypes: des-cbc-md5:normal
 krbSupportedEncSaltTypes: des-cbc-crc:normal
 krbSupportedEncSaltTypes: des-cbc-crc:v4
 krbSupportedEncSaltTypes: des-cbc-crc:afs3
+-
+add: krbMaxTicketLife
+krbMaxTicketLife: 86400
+-
+add: krbMaxRenewableAge
+krbMaxRenewableAge: 604800
 
 #kerberos keytypes
 dn: cn=$REALM,cn=kerberos,$SUFFIX