document enforce-transited-policy

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13038 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Johan Danielsson
2003-10-21 11:22:52 +00:00
parent 357e4592b9
commit 74f0967ff7

View File

@@ -31,7 +31,7 @@
.\" .\"
.\" $Id$ .\" $Id$
.\" .\"
.Dd August 22, 2002 .Dd October 21, 2003
.Dt KDC 8 .Dt KDC 8
.Os HEIMDAL .Os HEIMDAL
.Sh NAME .Sh NAME
@@ -185,6 +185,10 @@ Permit tickets with no addresses.
This option is only relevant when check-ticket-addresses is TRUE. This option is only relevant when check-ticket-addresses is TRUE.
.It Li allow-anonymous = Va boolean .It Li allow-anonymous = Va boolean
Permit anonymous tickets with no addresses. Permit anonymous tickets with no addresses.
.It Li enforce-transited-policy = Va boolean
Always verify the transited policy, ignoring the
.Va disable-transited-check
flag if set in the KDC client request.
.It encode_as_rep_as_tgs_rep = Va boolean .It encode_as_rep_as_tgs_rep = Va boolean
Encode AS-Rep as TGS-Rep to be bug-compatible with old DCE code. Encode AS-Rep as TGS-Rep to be bug-compatible with old DCE code.
The Heimdal clients allow both. The Heimdal clients allow both.