From: Theodore Tso <tytso@mit.edu>
Date: Fri, 5 May 1995 05:13:43 +0000 (+0000)
Subject: krb5.conf: Add example of the new [realms]/<realm>/v4_instance_convert/
X-Git-Tag: krb5-1.0-beta5~25
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=0262424b484a9b7a6e95752e66c06c2c25adad43;p=krb5.git

krb5.conf: Add example of the new [realms]/<realm>/v4_instance_convert/
	<instance> form used by krb5_425_convert_principal.

krb5.conf.M: Document new v4_instance_convert subsection.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5728 dc483132-0cff-0310-8789-dd5450dbe970
---

diff --git a/src/config-files/ChangeLog b/src/config-files/ChangeLog
index 2907130c5..9dd7a2d9f 100644
--- a/src/config-files/ChangeLog
+++ b/src/config-files/ChangeLog
@@ -1,3 +1,11 @@
+Fri May  5 00:58:55 1995  Theodore Y. Ts'o  (tytso@dcl)
+
+	* krb5.conf: Add example of the new [realms]/<realm>/
+		v4_instance_convert/<instance> form used by
+		krb5_425_convert_principal.
+
+	* krb5.conf.M: Document new v4_instance_convert subsection.
+
 Tue Apr 25 22:04:54 1995  Theodore Y. Ts'o  <tytso@dcl>
 
 	* krb5.conf.M: New file added to document the new krb5.conf
diff --git a/src/config-files/krb5.conf b/src/config-files/krb5.conf
index 13745073c..5882d9770 100644
--- a/src/config-files/krb5.conf
+++ b/src/config-files/krb5.conf
@@ -9,6 +9,10 @@
 		kdc = KERBEROS-1.MIT.EDU
 		admin_server = KERBEROS.MIT.EDU
 		default_domain = MIT.EDU
+		v4_instance_convert = {
+			mit = mit.edu
+			lithium = lithium.lcs.mit.edu
+		}
 	}
 	CYGNUS.COM = {
 		kdc = KERBEROS-1.CYGNUS.COM
diff --git a/src/config-files/krb5.conf.M b/src/config-files/krb5.conf.M
index 68a78518c..71ac54d86 100644
--- a/src/config-files/krb5.conf.M
+++ b/src/config-files/krb5.conf.M
@@ -103,6 +103,10 @@ example:
 		kdc = KERBEROS-2.MIT.EDU:88
 		admin_server = KERBEROS.MIT.EDU
 		default_domain = MIT.EDU
+		v4_instance_convert = {
+			mit = mit.edu
+			lithium = lithium.lcs.mit.edu
+		}
 	}
 .in -1i
 .fi
@@ -125,6 +129,12 @@ This relation identifies the default domain for which hosts in this
 realm are assumed to be in.  This is needed for translating V4 principal names
 (which do not contain a domain name) to V5 principal names (which do).  
 
+.IP v4_instance_convert
+This subsection allows the administrator to configure exceptions to
+the default_domain mapping rule.  It contains V4 instances (the tag
+name) which should be translated to some specific hostname (the tag
+value) as the second component in a Kerberos V5 principal name.
+
 .SH DOMAIN_REALM SECTION
 
 The [domain_realm] section provides a translation from a hostname to