diff options
author | no author <devnull@mit.edu> | 2001-11-28 21:31:00 +0000 |
---|---|---|
committer | no author <devnull@mit.edu> | 2001-11-28 21:31:00 +0000 |
commit | 99bfc16ee82eb761295c76312d3a2e810898ed28 (patch) | |
tree | 76bba32212e2df8e7e0be72008fb7aa652593055 /src/config-files/krb5.conf.M | |
parent | 38037332d7af42124646c268874e0833bd8ec30e (diff) | |
download | krb5-krb5-1.2.3-beta3.zip krb5-krb5-1.2.3-beta3.tar.gz krb5-krb5-1.2.3-beta3.tar.bz2 |
This commit was manufactured by cvs2svn to create tagkrb5-1.2.3-beta3
'krb5-1-2-3-beta3'.
git-svn-id: svn://anonsvn.mit.edu/krb5/tags/krb5-1-2-3-beta3@14028 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/config-files/krb5.conf.M')
-rw-r--r-- | src/config-files/krb5.conf.M | 23 |
1 files changed, 16 insertions, 7 deletions
diff --git a/src/config-files/krb5.conf.M b/src/config-files/krb5.conf.M index 143601e..3ca1a6a 100644 --- a/src/config-files/krb5.conf.M +++ b/src/config-files/krb5.conf.M @@ -136,15 +136,18 @@ earlier. This allows you to set the checksum type used in the authenticator of KRB_AP_REQ messages. The default value for this type is CKSUMTYPE_RSA_MD5. For compatibility with applications linked against -DCE Kerberos libraries, use a value of 2 to use the CKSUMTYPE_RSA_MD4 -instead. This applies to DCE 1.1 and earlier. +DCE version 1.1 or earlier Kerberos libraries, use a value of 2 to use +the CKSUMTYPE_RSA_MD4 +instead. .IP safe_checksum_type -This allows you to set the keyed-checksum type used in KRB_SAFE +This allows you to set the preferred keyed-checksum type for use in KRB_SAFE messages. The default value for this type is CKSUMTYPE_RSA_MD5_DES. -For compatibility with applications linked against DCE Kerberos +For compatibility with applications linked against DCE version 1.1 or +earlier Kerberos libraries, use a value of 3 to use the CKSUMTYPE_RSA_MD4_DES -instead. This applies to DCE 1.1 and earlier. +instead. This field is ignored when its value is incompatible with +the session key type. .IP ccache_type User this parameter on systems which are DCE clients, to specify the @@ -179,6 +182,7 @@ subsection define the properties of that particular realm. For example: mit = mit.edu lithium = lithium.lcs.mit.edu } + v4_realm = LCS.MIT.EDU } .in -1i .fi @@ -208,6 +212,13 @@ default_domain mapping rule. It contains V4 instances (the tag name) which should be translated to some specific hostname (the tag value) as the second component in a Kerberos V5 principal name. +.IP v4_realm +This relation is used by the krb524 library routines when converting +a V5 principal name to a V4 principal name. It is used when V4 realm +name and the V5 realm are not the same, but still share the same +principal names and passwords. The tag value is the Kerberos V4 realm +name. + .SH DOMAIN_REALM SECTION The [domain_realm] section provides a translation from a hostname to the @@ -397,8 +408,6 @@ would look like this: NERSC.GOV = ANL.GOV NERSC.GOV = ES.NET } - - } .in -1i .fi .sp |