add some more options

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@8012 ec53bebd-3082-4978-b11e-865c3cabbd6b

kdc/kdc.8

@@ -103,8 +103,8 @@ and then start the KDC with
 .Fl -config-file= Ns Ar /etc/krb5.conf ) .
 All options should be in a section called
 .Dq kdc .
-Options are called the same as the long option name, and takes the
-same arguments. The only difference is the pre-authentication flag,
+All the command-line options can preferably be added in the
+configuration file.  The only difference is the pre-authentication flag,
 that has to be specified as:
 .Pp
 .Dl require-preauth = no
@@ -112,6 +112,23 @@ that has to be specified as:
 (in fact you can specify the option as
 .Fl -require-preauth=no ) .
 .Pp
+And there are some configuration options which do not have
+command-line equivalents:
+.Bl -tag width "xxx" -offset indent
+.It Li check-ticket-addresses = Va boolean
+Check the addresses in the ticket when processing TGS requests.  The
+default is FALSE.
+.It Li allow-null-ticket-addresses = Va boolean
+Permit tickets with no addresses.  This option is only relevant when
+check-ticket-addresses is TRUE.
+.It encode_as_rep_as_tgs_rep = Va boolean
+Encode AS-Rep as TGS-Rep to be bug-compatible with old DCE code.  The
+Heimdal clients allow both.
+.It kdc_warn_pwexpire = Va time
+How long before password/principal expiration the KDC should start
+sending out warning messages.
+.El
+.Pp
 An example of a config file:
 .Bd -literal -offset indent
 [kdc]