/usr/share/ipa/kdc_req.conf.template is in freeipa-server 4.7.0~pre1+git20180411-2ubuntu2.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 | [ req ]
default_bits = 2048
distinguished_name = req_distinguished_name
attributes = req_attributes
prompt = no
output_password = $PASSWORD
[ req_distinguished_name ]
$SUBJBASE
$CERTNAME
[ req_attributes ]
challengePassword = A challenge password
|