aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--src/config-files/ChangeLog5
-rw-r--r--src/config-files/krb5.conf.M6
2 files changed, 7 insertions, 4 deletions
diff --git a/src/config-files/ChangeLog b/src/config-files/ChangeLog
index eaaa355..c663313 100644
--- a/src/config-files/ChangeLog
+++ b/src/config-files/ChangeLog
@@ -1,3 +1,8 @@
+2003-05-30 Ken Raeburn <raeburn@mit.edu>
+
+ * krb5.conf.M: Remove "kdc =" lines from "realms" section example,
+ and recommend not using it unless DNS info isn't available.
+
2003-05-29 Ken Raeburn <raeburn@mit.edu>
* kdc.conf.M (FILES): Refer to correct location for kdc.conf in
diff --git a/src/config-files/krb5.conf.M b/src/config-files/krb5.conf.M
index 61545f3..97ba838 100644
--- a/src/config-files/krb5.conf.M
+++ b/src/config-files/krb5.conf.M
@@ -233,9 +233,6 @@ subsection define the properties of that particular realm. For example:
.in +1i
[realms]
ATHENA.MIT.EDU = {
- kdc = KERBEROS.MIT.EDU
- kdc = KERBEROS-1.MIT.EDU:750
- kdc = KERBEROS-2.MIT.EDU:88
admin_server = KERBEROS.MIT.EDU
default_domain = MIT.EDU
v4_instance_convert = {
@@ -254,7 +251,8 @@ subsection:
.IP kdc
The value of this relation is the name of a host running a KDC for that
realm. An optional port number (preceded by a colon) may be appended to
-the hostname.
+the hostname. This tag should generally be used only if the realm
+administrator has not made the information available through DNS.
.IP admin_server
This relation identifies the host where the administration server is