From: Greg Hudson <ghudson@mit.edu>
Date: Wed, 29 Jun 2011 17:03:19 +0000 (+0000)
Subject: Document preauth krb5.conf options in rst docs
X-Git-Tag: krb5-1.10-alpha1~373
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=c1c914d9fd4eb9cacab1575648b89c95232545b9;p=krb5.git

Document preauth krb5.conf options in rst docs

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25002 dc483132-0cff-0310-8789-dd5450dbe970
---

diff --git a/doc/rst_source/krb_admins/conf_files/krb5_conf.rst b/doc/rst_source/krb_admins/conf_files/krb5_conf.rst
index 262734643..f7f7246f4 100644
--- a/doc/rst_source/krb_admins/conf_files/krb5_conf.rst
+++ b/doc/rst_source/krb_admins/conf_files/krb5_conf.rst
@@ -420,6 +420,7 @@ Plugins
 
     * pwqual interface
     * kadm5_hook interface
+    * clpreauth and kdcpreauth interfaces
 
 Tags in the **[plugins]** section can be used to register dynamic plugin modules and to turn modules on and off. Not every krb5 pluggable interface uses the [plugins] section; the ones that do are documented here.
 
@@ -455,6 +456,16 @@ kadm5_hook interface
 
 The kadm5_hook interface provides plugins with information on principal creation, modification, password changes and deletion. This interface can be used to write a plugin to synchronize MIT Kerberos with another database such as Active Directory. No plugins are built in for this interface.
 
+clpreauth and kdcpreauth interfaces
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+The clpreauth and kdcpreauth interfaces allow plugin modules to provide client and KDC preauthentication mechanisms.  The following built-in modules exist for these interfaces:
+
+pkinit
+    This module implements the PKINIT preauthentication mechanism.
+encrypted_challenge
+    This module implements the encrypted challenge FAST factor.
+
 PKINIT options
 -----------------