+Mon Aug 21 16:59:00 EDT 1995 Paul Park (pjpark@mit.edu)
+ * kdc.conf.M - Change types of master_key_type and encryption_type to
+ be "key type string" and "encryption type string". Add
+ default_principal_expiration, default_principal_flags and
+ supported_keytypes.
+
+
Wed Jul 12 12:06:10 EDT 1995 Paul Park (pjpark@mit.edu)
* kdc.conf[.M] - Change syntax. KDC now has per-realm information in
[realms] section and has [kdcdefaults] to contain global data.
.IP master_key_type
This
-.B integer
-represents the master key's key type (see krb5.h for key type values).
+.B key type string
+represents the master key's key type.
.IP encryption_type
This
-.B integer
-represents the encryption type used for this realm (see krb5.h for
-encryption type values).
+.B encryption type string
+represents the encryption type used for this realm.
.IP key_stash_file
This
.IP max_life
This
-.B string
+.B delta time string
specifes the maximum time period that a ticket may be valid for in
-this realm. The format of this string may be one of the following:
-.in +1i
-.I <days>-<hours>:<minutes>:<seconds>
-
-.I <days>d <hours>h <minutes>m <seconds>s
-
-.I <hours>:<minutes>:<seconds>
-
-.I <hours>h <minutes>m <seconds>s
-
-.I <hours>:<minutes>
-
-.I <hours>h <minutes>m
+this realm.
-.I <seconds>
-
-.in -1i
.IP max_renewable_life
This
-.B string
+.B delta time string
specifies the maximum time period that a ticket may be renewed for in
-this realm. The format is the same as for
-.I max_life.
+this realm.
+
+.IP default_principal_expiration
+This
+.B absolute time string
+specifies the default expiration date of principals created in this realm.
+
+.IP default_principal_flags
+This
+.B flag string
+specifies the default attributes of principals created in this realm.
+
+.IP supported_keytypes
+This list of
+.B key
+:
+.B salt
+strings specifies the default key/salt combinations of principals for this
+realm.
.SH FILES
/usr/local/lib/krb5kdc/kdc.conf