Add documentation for the clockskew and kdc_timesync relations in the

libdefaults section.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6655 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/config-files/ChangeLog b/src/config-files/ChangeLog
index b5f4e415d535d5d4c64cf6b8e280a170ad7e15e5..2a2fa8b42ebe3d81add09d99aa2ef2efe063b16f 100644 (file)
--- a/src/config-files/ChangeLog
+++ b/src/config-files/ChangeLog
@@ -1,3 +1,8 @@
+Fri Sep  1 23:26:46 1995  Theodore Y. Ts'o  <tytso@dcl>
+
+       * krb5.conf.M: Add documentation for the clockskew and
+               kdc_timesync relations in the libdefaults section.
+
 Thu Aug 24 19:24:26 1995  Theodore Y. Ts'o  <tytso@dcl>
 
        * .Sanitize: Update file list

diff --git a/src/config-files/krb5.conf.M b/src/config-files/krb5.conf.M
index 4721dcd94694bc5a9941efe60686b13cb7ff06ac..0a0c00fcfe236451822f240f84ff7404f8169377 100644 (file)
--- a/src/config-files/krb5.conf.M
+++ b/src/config-files/krb5.conf.M
@@ -90,6 +90,18 @@ The following relations are defined in the [libdefaults] section:
 This relation identifies the default realm to be used in a client
 host's Kerberos activity.
 
+.IP clockskew 
+This relation sets the maximum allowable amount of clockskew in
+seconds that the library will tolerate before assuming that a Kerberos
+message is invalid.  The default value is 300 seconds, or five
+minutes.
+
+.IP kdc_timesync 
+If the value of this relation is non-zero, the library will compute
+the difference between the system clock and the time returned by the
+KDC and in order to correct for an inaccurate system clock.  This
+corrective factor is only used by the Kerberos library.
+
 .SH REALMS SECTION
 
 Each tag in the [realms] section of the file names a Kerberos realm.