* krb5.conf.M: Update description of safe_checksum_type for recent

	changes. [pullup from krb5-1-2-2-branch]

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13143 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/config-files/ChangeLog b/src/config-files/ChangeLog
index 7a3f1e0a1ffc94010d5d4d12039e4cb94b6fc8dd..9dc91f27bcc12c79e6613eef1cf49807b02f9587 100644 (file)
--- a/src/config-files/ChangeLog
+++ b/src/config-files/ChangeLog
@@ -1,3 +1,8 @@
+2001-04-04  Tom Yu  <tlyu@mit.edu>
+
+       * krb5.conf.M: Update description of safe_checksum_type for recent
+       changes. [pullup from krb5-1-2-2-branch]
+       
 2000-05-31  Ken Raeburn  <raeburn@mit.edu>
 
        * krb5.conf.M: Added description of v4_realm from Booker

diff --git a/src/config-files/krb5.conf.M b/src/config-files/krb5.conf.M
index 1b48e57e3ae77825fe8a3b730c2b093deded7f01..3ca1a6adee7f33eca190987b2023c4770c7b66a3 100644 (file)
--- a/src/config-files/krb5.conf.M
+++ b/src/config-files/krb5.conf.M
@@ -136,15 +136,18 @@ earlier.
 This allows you to set the checksum type used in the authenticator of
 KRB_AP_REQ messages.  The default value for this type is
 CKSUMTYPE_RSA_MD5.  For compatibility with applications linked against
-DCE Kerberos libraries, use a value of 2 to use the CKSUMTYPE_RSA_MD4
-instead. This applies to DCE 1.1 and earlier.
+DCE version 1.1 or earlier Kerberos libraries, use a value of 2 to use
+the CKSUMTYPE_RSA_MD4
+instead.
 
 .IP safe_checksum_type 
-This allows you to set the keyed-checksum type used in KRB_SAFE
+This allows you to set the preferred keyed-checksum type for use in KRB_SAFE
 messages.  The default value for this type is CKSUMTYPE_RSA_MD5_DES.
-For compatibility with applications linked against DCE Kerberos
+For compatibility with applications linked against DCE version 1.1 or
+earlier Kerberos
 libraries, use a value of 3 to use the CKSUMTYPE_RSA_MD4_DES
-instead. This applies to DCE 1.1 and earlier.
+instead.  This field is ignored when its value is incompatible with
+the session key type.
 
 .IP ccache_type
 User this parameter on systems which are DCE clients, to specify the