From 74f0967ff7946d3dd942c292ad2a9d96a2b64a4f Mon Sep 17 00:00:00 2001
From: Johan Danielsson <joda@pdc.kth.se>
Date: Tue, 21 Oct 2003 11:22:52 +0000
Subject: [PATCH] document enforce-transited-policy

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13038 ec53bebd-3082-4978-b11e-865c3cabbd6b
---
 kdc/kdc.8 | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/kdc/kdc.8 b/kdc/kdc.8
index aa8d5f47e..8c7bcefcc 100644
--- a/kdc/kdc.8
+++ b/kdc/kdc.8
@@ -31,7 +31,7 @@
 .\"
 .\" $Id$
 .\"
-.Dd August 22, 2002
+.Dd October 21, 2003
 .Dt KDC 8
 .Os HEIMDAL
 .Sh NAME
@@ -185,6 +185,10 @@ Permit tickets with no addresses.
 This option is only relevant when check-ticket-addresses is TRUE.
 .It Li allow-anonymous = Va boolean
 Permit anonymous tickets with no addresses.
+.It Li enforce-transited-policy = Va boolean
+Always verify the transited policy, ignoring the
+.Va disable-transited-check 
+flag if set in the KDC client request.
 .It encode_as_rep_as_tgs_rep = Va boolean
 Encode AS-Rep as TGS-Rep to be bug-compatible with old DCE code.
 The Heimdal clients allow both.