From: Greg Hudson <ghudson@mit.edu>
Date: Fri, 16 Mar 2012 13:57:31 +0000 (+0000)
Subject: Document the ccselect interface in krb5.conf
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=edd6e63d3b83b7c7cdb2e36254c641daa1077fc4;p=krb5.git

Document the ccselect interface in krb5.conf

r25158 (#6957) omitted krb5.conf documentation for the ccselect
interface.  Add it now.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25773 dc483132-0cff-0310-8789-dd5450dbe970
---

diff --git a/doc/rst_source/krb_admins/conf_files/krb5_conf.rst b/doc/rst_source/krb_admins/conf_files/krb5_conf.rst
index b8e51d41f..83027a011 100644
--- a/doc/rst_source/krb_admins/conf_files/krb5_conf.rst
+++ b/doc/rst_source/krb_admins/conf_files/krb5_conf.rst
@@ -638,6 +638,24 @@ All subsections support the same tags:
 The following subsections are currently supported within the [plugins]
 section:
 
+.. _ccselect:
+
+ccselect interface
+##################
+
+The ccselect subsection controls modules for credential cache
+selection within a cache collection.  In addition to any registered
+dynamic modules, the following built-in modules exist (and may be
+disabled with the disable tag):
+
+**k5identity**
+    Uses a .k5identity file in the user's home directory to select a
+    client principal
+
+**realm**
+    Uses the service realm to guess an appropriate cache from the
+    collection
+
 .. _pwqual:
 
 pwqual interface
@@ -645,8 +663,7 @@ pwqual interface
 
 The pwqual subsection controls modules for the password quality
 interface, which is used to reject weak passwords when passwords are
-changed.  In addition to any registered dynamic modules, the following
-built-in modules exist (and may be disabled with the disable tag):
+changed.  The following built-in modules exist for this interface:
 
 **dict**
     Checks against the realm dictionary file