oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Document dns_lookup_srv, dns_lookup_realm, and the special token

Browse Source 
`dns_locate' in the [domain_realms] section.
Drop documentation for `srv_lookup'.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11257 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Jacques A. Vidrine
2002-08-28 15:33:59 +00:00
parent c638984e5d
commit 969a8f5cf8
1 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
lib/krb5/krb5.conf.5
View File

@@ -117,6 +117,10 @@ A list of default etypes to use when requesting a DES credential.
.It Li default_keytab_name = Va keytab .It Li default_keytab_name = Va keytab
The keytab to use if none other is specified, default is The keytab to use if none other is specified, default is
.Dq FILE:/etc/krb5.keytab . .Dq FILE:/etc/krb5.keytab .
.It Li dns_lookup_kdc = Va boolean
Use DNS SRV records to lookup KDC services location.
.It Li dns_lookup_realm = Va boolean
Use DNS TXT records to lookup domain to realm mappings.
.It Li kdc_timesync = Va boolean .It Li kdc_timesync = Va boolean
Try to keep track of the time differential between the local machine Try to keep track of the time differential between the local machine
and the KDC, and then compensate for that when issuing requests. and the KDC, and then compensate for that when issuing requests.
@@ -154,8 +158,6 @@ How to print date strings in logs, this string is passed to
.Xr strftime 3 . .Xr strftime 3 .
.It Li log_utc = Va boolean .It Li log_utc = Va boolean
Write log-entries using UTC instead of your local time zone. Write log-entries using UTC instead of your local time zone.
.It Li srv_lookup = Va boolean
Use DNS SRV records to lookup realm configuration information.
.It Li scan_interfaces = Va boolean .It Li scan_interfaces = Va boolean
Scan all network interfaces for addresses, as opposed to simply using Scan all network interfaces for addresses, as opposed to simply using
the address associated with the system's host name. the address associated with the system's host name.
@@ -177,6 +179,9 @@ binding in this section looks like:
The domain can be either a full name of a host or a trailing The domain can be either a full name of a host or a trailing
component, in the latter case the domain-string should start with a component, in the latter case the domain-string should start with a
perid. perid.
The realm may be the token `dns_locate', in which case the actual
realm will be determined using DNS (independently of the setting
of the `dns_lookup_realm' option).
.It Li [realms] .It Li [realms]
.Bl -tag -width "xxx" -offset indent .Bl -tag -width "xxx" -offset indent
.It Va REALM Li = { .It Va REALM Li = {