From: Russ Allbery <rra@stanford.edu>
Date: Fri, 5 Jan 2007 21:42:38 +0000 (+0000)
Subject: Document what the kadmind ACL is for
X-Git-Tag: krb5-1.7-alpha1~1370
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=d1158db7e43ef033dd2ac0ae60bd239aec866094;p=krb5.git

Document what the kadmind ACL is for

Add a sentence documenting the purpose of the kadmind ACL to the node
explaining how to create it.

Ticket: 5279
Component: krb5-doc
Version_Reported: 1.5.1
Target_Version: 1.6
Tags: pullup

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19036 dc483132-0cff-0310-8789-dd5450dbe970
---

diff --git a/doc/install.texinfo b/doc/install.texinfo
index fb13a8192..64cdac70e 100644
--- a/doc/install.texinfo
+++ b/doc/install.texinfo
@@ -518,10 +518,12 @@ want a stash file, run the above command without the @code{-s} option.
 @subsubsection Add Administrators to the Acl File
 
 Next, you need create an Access Control List (acl) file, and put the
-Kerberos principal of at least one of the administrators into it.  The
-filename should match the value you have set for ``acl_file'' in your
-@code{kdc.conf} file.  The default file name is
-@samp{@value{DefaultAclFile}}.  
+Kerberos principal of at least one of the administrators into it.  This
+file is used by the @code{kadmind} daemon to control which principals
+may view and make privileged modifications to the Kerberos database
+files.  The filename should match the value you have set for
+``acl_file'' in your @code{kdc.conf} file.  The default file name is
+@samp{@value{DefaultAclFile}}.
 
 @include kadm5acl.texinfo