diff options
Diffstat (limited to 'src/man/kadmin.man')
| -rw-r--r-- | src/man/kadmin.man | 11 |
1 files changed, 10 insertions, 1 deletions
diff --git a/src/man/kadmin.man b/src/man/kadmin.man index 47631e6..d028dc2 100644 --- a/src/man/kadmin.man +++ b/src/man/kadmin.man @@ -715,6 +715,15 @@ attributes required for the client certificate used by the principal during PKINIT authentication. The matching expression is in the same format as those used by the \fBpkinit_cert_match\fP option in krb5.conf(5)\&. (New in release 1.16.) +.TP +\fBpac_privsvr_enctype\fP +Forces the encryption type of the PAC KDC checksum buffers to the +specified encryption type for tickets issued to this server, by +deriving a key from the local krbtgt key if it is of a different +encryption type. It may be necessary to set this value to +"aes256\-sha1" on the cross\-realm krbtgt entry for an Active +Directory realm when using aes\-sha2 keys on the local krbtgt +entry. .UNINDENT .sp This command requires the \fBmodify\fP privilege. @@ -1085,6 +1094,6 @@ kpasswd(1), kadmind(8), kerberos(7) .SH AUTHOR MIT .SH COPYRIGHT -1985-2022, MIT +1985-2023, MIT .\" Generated by docutils manpage writer. . |