Small fixes, from David Love.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20259 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
@@ -1,4 +1,4 @@
|
|||||||
.\" Copyright (c) 2002 - 2004, 2006 Kungliga Tekniska H<>gskolan
|
.\" Copyright (c) 2002 - 2007 Kungliga Tekniska H<>gskolan
|
||||||
.\" (Royal Institute of Technology, Stockholm, Sweden).
|
.\" (Royal Institute of Technology, Stockholm, Sweden).
|
||||||
.\" All rights reserved.
|
.\" All rights reserved.
|
||||||
.\"
|
.\"
|
||||||
@@ -32,7 +32,7 @@
|
|||||||
.\" $Id$
|
.\" $Id$
|
||||||
.\"
|
.\"
|
||||||
.Dd September 18, 2006
|
.Dd September 18, 2006
|
||||||
.Dt KERBEROS SECTION
|
.Dt KERBEROS 1
|
||||||
.Os Heimdal
|
.Os Heimdal
|
||||||
.Sh NAME
|
.Sh NAME
|
||||||
.Nm kimpersonate
|
.Nm kimpersonate
|
||||||
@@ -68,8 +68,8 @@ impersonate a user when there exist a srvtab, keyfile or KeyFile
|
|||||||
.Sh DESCRIPTION
|
.Sh DESCRIPTION
|
||||||
The
|
The
|
||||||
.Nm
|
.Nm
|
||||||
program create a "fake" ticket using the service-key of the service,
|
program creates a "fake" ticket using the service-key of the service.
|
||||||
the service key can be read from a Kerberos 5 keytab, AFS KeyFile or
|
The service key can be read from a Kerberos 5 keytab, AFS KeyFile or
|
||||||
(if compiled with support for Kerberos 4) a Kerberos 4 srvtab.
|
(if compiled with support for Kerberos 4) a Kerberos 4 srvtab.
|
||||||
Supported options:
|
Supported options:
|
||||||
.Bl -tag -width Ds
|
.Bl -tag -width Ds
|
||||||
@@ -92,7 +92,7 @@ name of keytab file
|
|||||||
.Fl 5 Ns ,
|
.Fl 5 Ns ,
|
||||||
.Fl -krb5
|
.Fl -krb5
|
||||||
.Xc
|
.Xc
|
||||||
create a kerberos 5 ticket
|
create a Kerberos 5 ticket
|
||||||
.It Xo
|
.It Xo
|
||||||
.Fl e Ar integer Ns ,
|
.Fl e Ar integer Ns ,
|
||||||
.Fl -expire-time= Ns Ar integer
|
.Fl -expire-time= Ns Ar integer
|
||||||
@@ -143,8 +143,8 @@ or for debugging.
|
|||||||
.Nm
|
.Nm
|
||||||
-s host/hummel.e.kth.se@E.KTH.SE -c lha@E.KTH.SE -5
|
-s host/hummel.e.kth.se@E.KTH.SE -c lha@E.KTH.SE -5
|
||||||
will create a Kerberos 5 ticket for lha@E.KTH.SE for the host
|
will create a Kerberos 5 ticket for lha@E.KTH.SE for the host
|
||||||
hummel.e.kth.se if there exist a keytab entry for it in
|
hummel.e.kth.se if there exists a keytab entry for it in
|
||||||
.Pa /etc/krb5.keytab
|
.Pa /etc/krb5.keytab .
|
||||||
.Sh SEE ALSO
|
.Sh SEE ALSO
|
||||||
.Xr kinit 1 ,
|
.Xr kinit 1 ,
|
||||||
.Xr klist 1
|
.Xr klist 1
|
||||||
|
@@ -1,4 +1,4 @@
|
|||||||
.\" Copyright (c) 2003 Kungliga Tekniska H<>gskolan
|
.\" Copyright (c) 2003 - 2007 Kungliga Tekniska H<>gskolan
|
||||||
.\" (Royal Institute of Technology, Stockholm, Sweden).
|
.\" (Royal Institute of Technology, Stockholm, Sweden).
|
||||||
.\" All rights reserved.
|
.\" All rights reserved.
|
||||||
.\"
|
.\"
|
||||||
@@ -31,7 +31,7 @@
|
|||||||
.\"
|
.\"
|
||||||
.\" $Id$
|
.\" $Id$
|
||||||
.\"
|
.\"
|
||||||
.Dd April 24, 2005
|
.Dd February 18, 2006
|
||||||
.Dt KRB5_ANAME_TO_LOCALNAME 3
|
.Dt KRB5_ANAME_TO_LOCALNAME 3
|
||||||
.Os HEIMDAL
|
.Os HEIMDAL
|
||||||
.Sh NAME
|
.Sh NAME
|
||||||
@@ -63,16 +63,16 @@ If the size
|
|||||||
.Fa ( lnsize )
|
.Fa ( lnsize )
|
||||||
of the local name
|
of the local name
|
||||||
.Fa ( lname )
|
.Fa ( lname )
|
||||||
is to small, an error is returned.
|
is too small, an error is returned.
|
||||||
.Pp
|
.Pp
|
||||||
.Fn krb5_aname_to_localname
|
.Fn krb5_aname_to_localname
|
||||||
should only be use by application that implements protocols that
|
should only be use by an application that implements protocols that
|
||||||
doesn't transport the login name and thus needs to convert a principal
|
don't transport the login name and thus needs to convert a principal
|
||||||
to a local name.
|
to a local name.
|
||||||
.Pp
|
.Pp
|
||||||
Protocols should be designed so that the it autheticates using
|
Protocols should be designed so that they authenticate using
|
||||||
Kerberos, send over the login name and then verifies in the principal
|
Kerberos, send over the login name and then verify the principal
|
||||||
that authenticated is allowed to login and the login name.
|
that is authenticated is allowed to login and the login name.
|
||||||
A way to check if a user is allowed to login is using the function
|
A way to check if a user is allowed to login is using the function
|
||||||
.Fn krb5_kuserok .
|
.Fn krb5_kuserok .
|
||||||
.Sh SEE ALSO
|
.Sh SEE ALSO
|
||||||
|
@@ -1,4 +1,4 @@
|
|||||||
.\" Copyright (c) 2006 Kungliga Tekniska H<>gskolan
|
.\" Copyright (c) 2006 - 2007 Kungliga Tekniska H<>gskolan
|
||||||
.\" (Royal Institute of Technology, Stockholm, Sweden).
|
.\" (Royal Institute of Technology, Stockholm, Sweden).
|
||||||
.\" All rights reserved.
|
.\" All rights reserved.
|
||||||
.\"
|
.\"
|
||||||
@@ -31,7 +31,7 @@
|
|||||||
.\"
|
.\"
|
||||||
.\" $Id$
|
.\" $Id$
|
||||||
.\"
|
.\"
|
||||||
.Dd October 3, 2006
|
.Dd February 18, 2007
|
||||||
.Dt KRB5_DIGEST 3
|
.Dt KRB5_DIGEST 3
|
||||||
.Os HEIMDAL
|
.Os HEIMDAL
|
||||||
.Sh NAME
|
.Sh NAME
|
||||||
@@ -73,7 +73,7 @@ Kerberos 5 Library (libkrb5, -lkrb5)
|
|||||||
.Li "typedef struct krb5_digest *krb5_digest;"
|
.Li "typedef struct krb5_digest *krb5_digest;"
|
||||||
.Pp
|
.Pp
|
||||||
.Ft krb5_error_code
|
.Ft krb5_error_code
|
||||||
.Fa krb5_digest_alloc
|
.Fo krb5_digest_alloc
|
||||||
.Fa "krb5_context context"
|
.Fa "krb5_context context"
|
||||||
.Fa "krb5_digest *digest"
|
.Fa "krb5_digest *digest"
|
||||||
.Fc
|
.Fc
|
||||||
|
Reference in New Issue
Block a user