oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

some text about order of [capaths] realms

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13299 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2004-01-30 10:17:58 +00:00
parent 653db66d34
commit 2bbc0fced5
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
doc/setup.texi
View File

@@ -619,6 +619,15 @@ realm with @code{SU.SE} they need to use both @code{SU.SE} and
@end cartouche
@end example
The order of the @code{PERMITTED-CROSS-REALMS} is not important when
doing transit cross realm verification.
But the order is important when the @code{[capaths]} section is used
to figure out the intermediate realm to go to when doing multi realm
transit. When figuring out the next realm, the first realm of the list
of @code{PERMITTED-CROSS-REALMS} is chosen. This is done in both the
client kerberos library and the KDC.
@c To test the cross realm configuration, use:
@c kmumble transit-check client server transit-realms ...