From 3fd95cd89f2517e5a5715bef091582023af82ba6 Mon Sep 17 00:00:00 2001 From: Barry Jaspan Date: Tue, 9 Nov 1993 20:10:32 +0000 Subject: [PATCH] specified key tab git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@2844 dc483132-0cff-0310-8789-dd5450dbe970 --- doc/kadm5/api-funcspec.tex | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/doc/kadm5/api-funcspec.tex b/doc/kadm5/api-funcspec.tex index cb4100dcd..8df827f0c 100644 --- a/doc/kadm5/api-funcspec.tex +++ b/doc/kadm5/api-funcspec.tex @@ -1273,9 +1273,13 @@ specified port number is used. \item Otherwise, port number 752 is used. \end{enumerate} -\subsection{Authorization ACLs} +\subsection{Key Table, Authorization ACLs} \label{sec:acls} +The admin server's keytable is stored in /krb5/ovsec_admin.srvtab. It +contains entries for the principals ovsec_kadm/admin and +ovsec_kadm/changepw. + The admin server will use a simple ACL mechanism to grant privileges to principals. The file {\tt /krb5/ovsec_admin_acl} will contain a list of principals and their privileges. It is read at start-up, and -- 2.26.2