From: Tom Yu <tlyu@mit.edu>
Date: Mon, 20 Dec 2010 22:52:35 +0000 (+0000)
Subject: Document rdns libdefault setting
X-Git-Tag: krb5-1.10-alpha1~626
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=de6b1720991641529071b73a35542d305460e026;p=krb5.git

Document rdns libdefault setting

ticket: 6794
tags: pullup
target_version: 1.9

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24584 dc483132-0cff-0310-8789-dd5450dbe970
---

diff --git a/doc/admin.texinfo b/doc/admin.texinfo
index 0c5325466..5051b5d3f 100644
--- a/doc/admin.texinfo
+++ b/doc/admin.texinfo
@@ -615,6 +615,13 @@ The default value for this flag is @value{DefaultForwardable}.
 If this flag is set, initial tickets by default will be proxiable.
 The default value for this flag is @value{DefaultProxiable}.
 
+@itemx rdns
+If set to false, prevent the use of reverse DNS resolution when
+translating hostnames into service principal names.  Defaults to
+true.  Setting this flag to false is more secure, but may force
+users to exclusively use fully qualified domain names when
+authenticating to services.
+
 @end table
 
 
diff --git a/src/config-files/krb5.conf.M b/src/config-files/krb5.conf.M
index d03a1f468..df62d4d52 100644
--- a/src/config-files/krb5.conf.M
+++ b/src/config-files/krb5.conf.M
@@ -18,7 +18,7 @@
 .\" M.I.T. makes no representations about the suitability of
 .\" this software for any purpose.  It is provided "as is" without express
 .\" or implied warranty.
-.\" "
+.\"
 .TH KRB5.CONF 5
 .SH NAME
 krb5.conf \- Kerberos configuration file
@@ -268,6 +268,13 @@ The default value for this flag is false.
 If this flag is set, initial tickets by default will be proxiable.
 The default value for this flag is false.
 
+.IP rdns
+If set to false, prevent the use of reverse DNS resolution when
+translating hostnames into service principal names.  Defaults to
+true.  Setting this flag to false is more secure, but may force
+users to exclusively use fully qualified domain names when
+authenticating to services.
+
 .SH APPDEFAULTS SECTION
 
 Each tag in the [appdefaults] section names a Kerberos V5 application