Various manpages: Remove references to Kerberos 4.
This commit is contained in:
@@ -152,11 +152,6 @@ times.
|
|||||||
Default is 300 seconds (five minutes).
|
Default is 300 seconds (five minutes).
|
||||||
.It Li kdc_timeout = Va time
|
.It Li kdc_timeout = Va time
|
||||||
Maximum time to wait for a reply from the kdc, default is 3 seconds.
|
Maximum time to wait for a reply from the kdc, default is 3 seconds.
|
||||||
.It Li v4_name_convert
|
|
||||||
.It Li v4_instance_resolve
|
|
||||||
These are described in the
|
|
||||||
.Xr krb5_425_conv_principal 3
|
|
||||||
manual page.
|
|
||||||
.It Li capath = {
|
.It Li capath = {
|
||||||
.Bl -tag -width "xxx" -offset indent
|
.Bl -tag -width "xxx" -offset indent
|
||||||
.It Va destination-realm Li = Va next-hop-realm
|
.It Va destination-realm Li = Va next-hop-realm
|
||||||
@@ -242,12 +237,6 @@ Scan all network interfaces for addresses, as opposed to simply using
|
|||||||
the address associated with the system's host name.
|
the address associated with the system's host name.
|
||||||
.It Li fcache_version = Va int
|
.It Li fcache_version = Va int
|
||||||
Use file credential cache format version specified.
|
Use file credential cache format version specified.
|
||||||
.It Li krb4_get_tickets = Va boolean
|
|
||||||
Also get Kerberos 4 tickets in
|
|
||||||
.Nm kinit ,
|
|
||||||
.Nm login ,
|
|
||||||
and other programs.
|
|
||||||
This option is also valid in the [realms] section.
|
|
||||||
.It Li fcc-mit-ticketflags = Va boolean
|
.It Li fcc-mit-ticketflags = Va boolean
|
||||||
Use MIT compatible format for file credential cache.
|
Use MIT compatible format for file credential cache.
|
||||||
It's the field ticketflags that is stored in reverse bit order for
|
It's the field ticketflags that is stored in reverse bit order for
|
||||||
@@ -381,14 +370,6 @@ to the database are performed.
|
|||||||
Points to the server where all the password changes are performed.
|
Points to the server where all the password changes are performed.
|
||||||
If there is no such entry, the kpasswd port on the admin_server host
|
If there is no such entry, the kpasswd port on the admin_server host
|
||||||
will be tried.
|
will be tried.
|
||||||
.It Li krb524_server = Va host[:port]
|
|
||||||
Points to the server that does 524 conversions.
|
|
||||||
If it is not mentioned, the krb524 port on the kdcs will be tried.
|
|
||||||
.It Li v4_instance_convert
|
|
||||||
.It Li v4_name_convert
|
|
||||||
.It Li default_domain
|
|
||||||
See
|
|
||||||
.Xr krb5_425_conv_principal 3 .
|
|
||||||
.It Li tgs_require_subkey
|
.It Li tgs_require_subkey
|
||||||
a boolan variable that defaults to false.
|
a boolan variable that defaults to false.
|
||||||
Old DCE secd (pre 1.1) might need this to be true.
|
Old DCE secd (pre 1.1) might need this to be true.
|
||||||
@@ -513,19 +494,10 @@ for propagating changes to slaves.
|
|||||||
Maximum size of a kdc request.
|
Maximum size of a kdc request.
|
||||||
.It Li require-preauth = Va BOOL
|
.It Li require-preauth = Va BOOL
|
||||||
If set pre-authentication is required.
|
If set pre-authentication is required.
|
||||||
Since krb4 requests are not pre-authenticated they will be rejected.
|
|
||||||
.It Li ports = Va "list of ports"
|
.It Li ports = Va "list of ports"
|
||||||
List of ports the kdc should listen to.
|
List of ports the kdc should listen to.
|
||||||
.It Li addresses = Va "list of interfaces"
|
.It Li addresses = Va "list of interfaces"
|
||||||
List of addresses the kdc should bind to.
|
List of addresses the kdc should bind to.
|
||||||
.It Li enable-kerberos4 = Va BOOL
|
|
||||||
Turn on Kerberos 4 support.
|
|
||||||
.It Li v4-realm = Va REALM
|
|
||||||
To what realm v4 requests should be mapped.
|
|
||||||
.It Li enable-524 = Va BOOL
|
|
||||||
Should the Kerberos 524 converting facility be turned on.
|
|
||||||
Default is the same as
|
|
||||||
.Va enable-kerberos4 .
|
|
||||||
.It Li enable-http = Va BOOL
|
.It Li enable-http = Va BOOL
|
||||||
Should the kdc answer kdc-requests over http.
|
Should the kdc answer kdc-requests over http.
|
||||||
.It Li tgt-use-strongest-session-key = Va BOOL
|
.It Li tgt-use-strongest-session-key = Va BOOL
|
||||||
@@ -565,14 +537,6 @@ The time before expiration that the user should be warned that her
|
|||||||
password is about to expire.
|
password is about to expire.
|
||||||
.It Li logging = Va Logging
|
.It Li logging = Va Logging
|
||||||
What type of logging the kdc should use, see also [logging]/kdc.
|
What type of logging the kdc should use, see also [logging]/kdc.
|
||||||
.It Li use_2b = {
|
|
||||||
.Bl -tag -width "xxx" -offset indent
|
|
||||||
.It Va principal Li = Va BOOL
|
|
||||||
boolean value if the 524 daemon should return AFS 2b tokens for
|
|
||||||
.Fa principal .
|
|
||||||
.It ...
|
|
||||||
.El
|
|
||||||
.It Li }
|
|
||||||
.It Li hdb-ldap-structural-object Va structural object
|
.It Li hdb-ldap-structural-object Va structural object
|
||||||
If the LDAP backend is used for storing principals, this is the
|
If the LDAP backend is used for storing principals, this is the
|
||||||
structural object that will be used when creating and when reading
|
structural object that will be used when creating and when reading
|
||||||
@@ -645,9 +609,6 @@ Additional special values of keytypes are:
|
|||||||
.It Li v5
|
.It Li v5
|
||||||
The Kerberos 5 salt
|
The Kerberos 5 salt
|
||||||
.Va pw-salt
|
.Va pw-salt
|
||||||
.It Li v4
|
|
||||||
The Kerberos 4 salt
|
|
||||||
.Va des:pw-salt:
|
|
||||||
.El
|
.El
|
||||||
.It Li default_key_rules = Va {
|
.It Li default_key_rules = Va {
|
||||||
.Bl -tag -width "xxx" -offset indent
|
.Bl -tag -width "xxx" -offset indent
|
||||||
@@ -696,12 +657,6 @@ configuration file for Kerberos 5.
|
|||||||
[realms]
|
[realms]
|
||||||
FOO.SE = {
|
FOO.SE = {
|
||||||
kdc = kerberos.foo.se
|
kdc = kerberos.foo.se
|
||||||
v4_name_convert = {
|
|
||||||
rcmd = host
|
|
||||||
}
|
|
||||||
v4_instance_convert = {
|
|
||||||
xyz = xyz.bar.se
|
|
||||||
}
|
|
||||||
default_domain = foo.se
|
default_domain = foo.se
|
||||||
}
|
}
|
||||||
[logging]
|
[logging]
|
||||||
@@ -729,7 +684,6 @@ are actually used and thus cannot warn about unknown or misspelled
|
|||||||
ones.
|
ones.
|
||||||
.Sh SEE ALSO
|
.Sh SEE ALSO
|
||||||
.Xr kinit 1 ,
|
.Xr kinit 1 ,
|
||||||
.Xr krb5_425_conv_principal 3 ,
|
|
||||||
.Xr krb5_openlog 3 ,
|
.Xr krb5_openlog 3 ,
|
||||||
.Xr strftime 3 ,
|
.Xr strftime 3 ,
|
||||||
.Xr verify_krb5_conf 8
|
.Xr verify_krb5_conf 8
|
||||||
|
@@ -61,7 +61,6 @@ quoting it with a backslash
|
|||||||
.Pq Dq \e .
|
.Pq Dq \e .
|
||||||
A realm should not contain slashes or colons.
|
A realm should not contain slashes or colons.
|
||||||
.Sh SEE ALSO
|
.Sh SEE ALSO
|
||||||
.Xr krb5_425_conv_principal 3 ,
|
|
||||||
.Xr krb5_build_principal 3 ,
|
.Xr krb5_build_principal 3 ,
|
||||||
.Xr krb5_free_principal 3 ,
|
.Xr krb5_free_principal 3 ,
|
||||||
.Xr krb5_sname_to_principal 3 ,
|
.Xr krb5_sname_to_principal 3 ,
|
||||||
|
@@ -362,7 +362,6 @@ On failure the function returns an error code and set the error
|
|||||||
string.
|
string.
|
||||||
.\" .Sh EXAMPLES
|
.\" .Sh EXAMPLES
|
||||||
.Sh SEE ALSO
|
.Sh SEE ALSO
|
||||||
.Xr krb5_425_conv_principal 3 ,
|
|
||||||
.Xr krb5_config 3 ,
|
.Xr krb5_config 3 ,
|
||||||
.Xr krb5.conf 5
|
.Xr krb5.conf 5
|
||||||
.Sh BUGS
|
.Sh BUGS
|
||||||
|
Reference in New Issue
Block a user