diff --git a/lib/krb5/krb5.conf.5 b/lib/krb5/krb5.conf.5 index eaf629b25..92475615d 100644 --- a/lib/krb5/krb5.conf.5 +++ b/lib/krb5/krb5.conf.5 @@ -910,8 +910,7 @@ for .It Li enable_gss_preauth = Va boolean Enables pre-authentication using a GSS-API mechanism supported by the client and KDC. The GSS-API initiator and AS request client names must match, unless the -.Li -WELLKNOWN/FEDERATED +.Li WELLKNOWN/FEDERATED name was used in the AS request, in which case the AS reply will contain the GSS-API initiator name. Authorization and mapping behavior may be customized by plugins. If synthetic clients are enabled, then the GSS-API initiator need