Document clpreauth/kdcpreauth module configuration

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24982 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/doc/admin.texinfo b/doc/admin.texinfo
index 2dcbb7280e24297aea748037c01440fe433b82f4..f2b30d3668a8654cd53664c25c8b7deecc021f1a 100644 (file)
--- a/doc/admin.texinfo
+++ b/doc/admin.texinfo
@@ -1128,6 +1128,8 @@ This LDAP specific tags indicates the number of connections to be maintained per
 @menu
 * pwqual interface::            
 * kadm5_hook interface::        
+* clpreauth interface::        
+* kdcpreauth interface::        
 @end menu
 
 Tags in the [plugins] section can be used to register dynamic plugin
@@ -1183,7 +1185,7 @@ built with Hesiod support)
 Checks against components of the principal name
 @end table
 
-@node kadm5_hook interface,  , pwqual interface, plugins
+@node kadm5_hook interface, clpreauth interface, pwqual interface, plugins
 @subsubsection kadm5_hook interface
 The kadm5_hook interface provides plugins with information on
 principal creation, modification, password changes and deletion. This
@@ -1191,6 +1193,20 @@ interface can be used to write a plugin to synchronize MIT Kerberos
 with another database such as Active Directory. No plugins are built
 in for this interface.
 
+@node clpreauth interface, kdcpreauth interface, kadm5_hook interface, plugins
+@subsubsection clpreauth interface
+
+The clpreauth interface allows plugin modules to provide client
+preauthentication mechanisms.  There are no built-in modules for this
+interface.
+
+@node kdcpreauth interface, , clpreauth interface, plugins
+@subsubsection kdcpreauth interface
+
+The kdcpreauth interface allows plugin modules to provide KDC
+preauthentication mechanisms.  There are no built-in modules for this
+interface.
+
 @node pkinit client options, Sample krb5.conf File, plugins, krb5.conf
 @subsection pkinit options
 

diff --git a/src/config-files/krb5.conf.M b/src/config-files/krb5.conf.M
index 33f3d920c142aa397e5fca99abd2014839e3cdbd..4996e840256dd5b922c7c424726dcd2ad311944b 100644 (file)
--- a/src/config-files/krb5.conf.M
+++ b/src/config-files/krb5.conf.M
@@ -780,6 +780,18 @@ interface can be used to write a plugin to synchronize MIT Kerberos
 with another database such as Active Directory. No plugins are built
 in for this interface.
 
+.SS clpreauth interface
+
+The clpreauth interface allows plugin modules to provide client
+preauthentication mechanisms.  There are no built-in modules for this
+interface.
+
+.SS kdcpreauth interface
+
+The kdcpreauth interface allows plugin modules to provide KDC
+preauthentication mechanisms.  There are no built-in modules for this
+interface.
+
 .SH FILES 
 /etc/krb5.conf
 .SH SEE ALSO