oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

KRB5CCNAME needs an literal uid, not ${uid}, spelling

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15220 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2005-05-24 11:58:27 +00:00
parent a236332d81
commit e77e0b508d
1 changed files with 13 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
kcm/kcm.8
View File

@@ -31,7 +31,7 @@
.\" .\"
.\" $Id$ .\" $Id$
.\" .\"
.Dd May 3, 2005 .Dd May 24, 2005
.Dt KCM 8 .Dt KCM 8
.Os Heimdal .Os Heimdal
.Sh NAME .Sh NAME
@@ -92,27 +92,30 @@ is a process based credential cache.
To use it, set the To use it, set the
.Ev KRB5CCNAME .Ev KRB5CCNAME
enviroment variable to enviroment variable to
.Q1 KCM:${uid} .Ql KCM: Ns Ar uid
or add the configuration file or add the stanza
.br
[libdefaults]default_cc_name KCM:${uid}
.br
to the
.Pa /etc/krb5.conf .Pa /etc/krb5.conf
stanza [libdefaults]default_cc_name to KCM:${uid} and make sure configuration file and make sure
.Nm kcm .Nm kcm
is started in the system startup files. is started in the system startup files.
.Pp .Pp
The The
.Nm .Nm
daemon can hold the credentials for all users in the system. Access daemon can hold the credentials for all users in the system. Access
control is done with Unix like permissions. The daemon check the control is done with Unix-like permissions. The daemon checks the
access on all operations based on the uid and gid of the user. The access on all operations based on the uid and gid of the user. The
ticket are are are renewed as long as it permitted by the KDC's tickets are renewed as long as is permitted by the KDC's policy.
policy.
.Pp .Pp
The The
.Nm .Nm
daemon can also keep an SYSTEM credential that server processes can daemon can also keep a SYSTEM credential that server processes can
use to access services. One example of usage might be an nss_ldap use to access services. One example of usage might be an nss_ldap
module that quickly needs to get credential and doesn't want to renew module that quickly needs to get credentials and doesn't want to renew
the ticket themself. the ticket itself.
.Pp .Pp
Supported options: Supported options:
.Bl -tag -width Ds .Bl -tag -width Ds