oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

kdc: Add global disable_pac config param

Browse Source
This commit is contained in:
Nicolas Williams
2023-06-04 22:55:54 -05:00
committed by Nico Williams
parent 66445f4341
commit 2a38fa17b5
4 changed files with 19 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
lib/krb5/krb5.conf.5
View File

@@ -828,6 +828,11 @@ addresses in the tickets.
.It Li allow-null-ticket-addresses = Va BOOL
Allow address-less tickets.
.\" XXX
.It Li disable_pac = Va BOOL
Do not include a PAC in service tickets.
However, if a service has the
.Li auth-data-reqd
attribute then the KDC will include a PAC anyways.
.It Li enable_fast = Va BOOL
Enable RFC 6113 FAST support, this is enabled by default.
.It Li enable_armored_pa_enc_timestamp = Va BOOL