From 6304efeeccbea762a2e226444d890755931f6862 Mon Sep 17 00:00:00 2001 From: Assar Westerlund Date: Sat, 4 Mar 2000 14:43:59 +0000 Subject: [PATCH] add some more options git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@8012 ec53bebd-3082-4978-b11e-865c3cabbd6b --- kdc/kdc.8 | 21 +++++++++++++++++++-- 1 file changed, 19 insertions(+), 2 deletions(-) diff --git a/kdc/kdc.8 b/kdc/kdc.8 index 5d86c2d34..faa2ab9a3 100644 --- a/kdc/kdc.8 +++ b/kdc/kdc.8 @@ -103,8 +103,8 @@ and then start the KDC with .Fl -config-file= Ns Ar /etc/krb5.conf ) . All options should be in a section called .Dq kdc . -Options are called the same as the long option name, and takes the -same arguments. The only difference is the pre-authentication flag, +All the command-line options can preferably be added in the +configuration file. The only difference is the pre-authentication flag, that has to be specified as: .Pp .Dl require-preauth = no @@ -112,6 +112,23 @@ that has to be specified as: (in fact you can specify the option as .Fl -require-preauth=no ) . .Pp +And there are some configuration options which do not have +command-line equivalents: +.Bl -tag width "xxx" -offset indent +.It Li check-ticket-addresses = Va boolean +Check the addresses in the ticket when processing TGS requests. The +default is FALSE. +.It Li allow-null-ticket-addresses = Va boolean +Permit tickets with no addresses. This option is only relevant when +check-ticket-addresses is TRUE. +.It encode_as_rep_as_tgs_rep = Va boolean +Encode AS-Rep as TGS-Rep to be bug-compatible with old DCE code. The +Heimdal clients allow both. +.It kdc_warn_pwexpire = Va time +How long before password/principal expiration the KDC should start +sending out warning messages. +.El +.Pp An example of a config file: .Bd -literal -offset indent [kdc]