From 502360ef2d332d982dd6437a1dac3265afbcc27a Mon Sep 17 00:00:00 2001
From: "Asanka C. Herath" <asanka@secure-endpoints.com>
Date: Thu, 18 Nov 2010 08:34:36 -0500
Subject: [PATCH] Mention kpasswrd_server setting for krb5.conf

---
 doc/setup.texi | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/doc/setup.texi b/doc/setup.texi
index 6be7dac82..48ff5e6dc 100644
--- a/doc/setup.texi
+++ b/doc/setup.texi
@@ -407,7 +407,17 @@ To allow users to change their passwords, you should run @command{kpasswdd}.
 It is not run from @command{inetd}.
 
 You might need to add @samp{kpasswd} to your @file{/etc/services} as
-@samp{464/udp}.
+@samp{464/udp}.  If your realm is not setup to use DNS, you might also
+need to add a @samp{kpasswd_server} entry to the realm configuration
+in @file{/etc/krb5.conf} on client machines:
+
+@example
+[realms]
+        MY.REALM = @{
+                kdc = my.kdc my.slave.kdc
+                kpasswd_server = my.kdc
+        @}
+@end example
 
 @subsection Password quality assurance