oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

document recent changes

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13071 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Johan Danielsson
2003-10-22 18:45:56 +00:00
parent 1461770557
commit 3cedc78b77
1 changed files with 22 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

27
kdc/kdc.8
View File

@@ -31,7 +31,7 @@
.\" .\"
.\" $Id$ .\" $Id$
.\" .\"
.Dd October 21, 2003 .Dd October 22, 2003
.Dt KDC 8 .Dt KDC 8
.Os HEIMDAL .Os HEIMDAL
.Sh NAME .Sh NAME
@@ -185,10 +185,27 @@ Permit tickets with no addresses.
This option is only relevant when check-ticket-addresses is TRUE. This option is only relevant when check-ticket-addresses is TRUE.
.It Li allow-anonymous = Va boolean .It Li allow-anonymous = Va boolean
Permit anonymous tickets with no addresses. Permit anonymous tickets with no addresses.
.It Li enforce-transited-policy = Va boolean .It Li transited-policy = Xo
Always verify the transited policy, ignoring the .Li always-check \*(Ba
.Va disable-transited-check .Li allow-per-principal |
flag if set in the KDC client request. .Li always-honour-request
.Xc
This controls how KDC requests with the
.Li disable-transited-check
flag are handled. It can be one of:
.Bl -tag -width "xxx" -offset indent
.It Li always-check
Always check transited encoding, this is the default.
.It Li allow-per-principal
Currently this is identical to
.Li always-check .
In a future release, it will be possible to mark a principal as able
to handle unchecked requests.
.It Li always-honour-request
Always do what the client asked.
In a future release, it will be possible to force a check per
principal.
.El
.It encode_as_rep_as_tgs_rep = Va boolean .It encode_as_rep_as_tgs_rep = Va boolean
Encode AS-Rep as TGS-Rep to be bug-compatible with old DCE code. Encode AS-Rep as TGS-Rep to be bug-compatible with old DCE code.
The Heimdal clients allow both. The Heimdal clients allow both.