From: Theodore Tso <tytso@mit.edu>
Date: Sat, 2 Sep 1995 03:27:35 +0000 (+0000)
Subject: Add documentation for the clockskew and kdc_timesync relations in the
X-Git-Tag: krb5-1.0-beta6~1201
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=eec1b51a6bf366311659fbeed97ef3c0e2e549a5;p=krb5.git

Add documentation for the clockskew and kdc_timesync relations in the
libdefaults section.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6655 dc483132-0cff-0310-8789-dd5450dbe970
---

diff --git a/src/config-files/ChangeLog b/src/config-files/ChangeLog
index b5f4e415d..2a2fa8b42 100644
--- a/src/config-files/ChangeLog
+++ b/src/config-files/ChangeLog
@@ -1,3 +1,8 @@
+Fri Sep  1 23:26:46 1995  Theodore Y. Ts'o  <tytso@dcl>
+
+	* krb5.conf.M: Add documentation for the clockskew and
+		kdc_timesync relations in the libdefaults section.
+
 Thu Aug 24 19:24:26 1995  Theodore Y. Ts'o  <tytso@dcl>
 
 	* .Sanitize: Update file list
diff --git a/src/config-files/krb5.conf.M b/src/config-files/krb5.conf.M
index 4721dcd94..0a0c00fcf 100644
--- a/src/config-files/krb5.conf.M
+++ b/src/config-files/krb5.conf.M
@@ -90,6 +90,18 @@ The following relations are defined in the [libdefaults] section:
 This relation identifies the default realm to be used in a client
 host's Kerberos activity.
 
+.IP clockskew 
+This relation sets the maximum allowable amount of clockskew in
+seconds that the library will tolerate before assuming that a Kerberos
+message is invalid.  The default value is 300 seconds, or five
+minutes.
+
+.IP kdc_timesync 
+If the value of this relation is non-zero, the library will compute
+the difference between the system clock and the time returned by the
+KDC and in order to correct for an inaccurate system clock.  This
+corrective factor is only used by the Kerberos library.
+
 .SH REALMS SECTION
 
 Each tag in the [realms] section of the file names a Kerberos realm.