krb5.conf: Add example of the new [realms]/<realm>/v4_instance_convert/

	<instance> form used by krb5_425_convert_principal.

krb5.conf.M: Document new v4_instance_convert subsection.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5728 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/config-files/ChangeLog b/src/config-files/ChangeLog
index 2907130c5c9268c36b68ceb09a212ef1ad61eaa2..9dd7a2d9f3fbfe3319ec59c4b1c5caf6778112de 100644 (file)
--- a/src/config-files/ChangeLog
+++ b/src/config-files/ChangeLog
@@ -1,3 +1,11 @@
+Fri May  5 00:58:55 1995  Theodore Y. Ts'o  (tytso@dcl)
+
+       * krb5.conf: Add example of the new [realms]/<realm>/
+               v4_instance_convert/<instance> form used by
+               krb5_425_convert_principal.
+
+       * krb5.conf.M: Document new v4_instance_convert subsection.
+
 Tue Apr 25 22:04:54 1995  Theodore Y. Ts'o  <tytso@dcl>
 
        * krb5.conf.M: New file added to document the new krb5.conf

diff --git a/src/config-files/krb5.conf b/src/config-files/krb5.conf
index 13745073c63382baff114ab7ae39fad89cd590a5..5882d9770a9ad6fcf6f9ae4c8061e6c77f3bdbfd 100644 (file)
--- a/src/config-files/krb5.conf
+++ b/src/config-files/krb5.conf
@@ -9,6 +9,10 @@
                kdc = KERBEROS-1.MIT.EDU
                admin_server = KERBEROS.MIT.EDU
                default_domain = MIT.EDU
+               v4_instance_convert = {
+                       mit = mit.edu
+                       lithium = lithium.lcs.mit.edu
+               }
        }
        CYGNUS.COM = {
                kdc = KERBEROS-1.CYGNUS.COM

diff --git a/src/config-files/krb5.conf.M b/src/config-files/krb5.conf.M
index 68a78518c9bac99e96ca6bae290ec88fe7e7708b..71ac54d8659028dedc0b4161d2527e34aaf16e76 100644 (file)
--- a/src/config-files/krb5.conf.M
+++ b/src/config-files/krb5.conf.M
@@ -103,6 +103,10 @@ example:
                kdc = KERBEROS-2.MIT.EDU:88
                admin_server = KERBEROS.MIT.EDU
                default_domain = MIT.EDU
+               v4_instance_convert = {
+                       mit = mit.edu
+                       lithium = lithium.lcs.mit.edu
+               }
        }
 .in -1i
 .fi
@@ -125,6 +129,12 @@ This relation identifies the default domain for which hosts in this
 realm are assumed to be in.  This is needed for translating V4 principal names
 (which do not contain a domain name) to V5 principal names (which do).  
 
+.IP v4_instance_convert
+This subsection allows the administrator to configure exceptions to
+the default_domain mapping rule.  It contains V4 instances (the tag
+name) which should be translated to some specific hostname (the tag
+value) as the second component in a Kerberos V5 principal name.
+
 .SH DOMAIN_REALM SECTION
 
 The [domain_realm] section provides a translation from a hostname to