From 510f82a3dfdca65a7c9cd145739cd115d6edcdf0 Mon Sep 17 00:00:00 2001 From: Greg Hudson Date: Wed, 20 Jul 2011 19:14:38 +0000 Subject: [PATCH] Document loadable profile modules ticket: 6929 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25027 dc483132-0cff-0310-8789-dd5450dbe970 --- doc/rst_source/krb_admins/conf_files/krb5_conf.rst | 6 ++++++ src/config-files/krb5.conf.M | 12 ++++++++++++ 2 files changed, 18 insertions(+) diff --git a/doc/rst_source/krb_admins/conf_files/krb5_conf.rst b/doc/rst_source/krb_admins/conf_files/krb5_conf.rst index 53e7fd924..41de7e107 100644 --- a/doc/rst_source/krb_admins/conf_files/krb5_conf.rst +++ b/doc/rst_source/krb_admins/conf_files/krb5_conf.rst @@ -39,6 +39,12 @@ The krb5.conf file can include other files using either of the following directi *FILENAME* or *DIRNAME* should be an absolute path. The named file or directory must exist and be readable. Including a directory includes all files within the directory whose names consist solely of alphanumeric characters, dashes, or underscores. Included profile files are syntactically independent of their parents, so each included file must begin with a section header. +The krb5.conf file can specify that configuration should be obtained from a loadable module, rather than the file itself, using the following directive at the beginning of a line before any section headers:: + + module MODULEPATH:RESIDUAL + +*MODULEPATH* may be relative to the library path of the krb5 installation, or it may be an absolute path. *RESIDUAL* is provided to the module at initialization time. If krb5.conf uses a module directive, kdc.conf should also use one if it exists. + The krb5.conf file may contain any or all of the following sections: ============== ======================================================= diff --git a/src/config-files/krb5.conf.M b/src/config-files/krb5.conf.M index d29bd2b7f..70239e210 100644 --- a/src/config-files/krb5.conf.M +++ b/src/config-files/krb5.conf.M @@ -70,6 +70,18 @@ alphanumeric characters, dashes, or underscores. Included profile files are syntactically independent of their parents, so each included file must begin with a section header. +.PP +.I krb5.conf +can cause configuration to be obtained from a loadable profile module +by placing the directive "module MODULEPATH:RESIDUAL" at the beginning +of a line before any section headers. MODULEPATH may be relative to +the library path of the krb5 installation, or it may be an absolute +path. RESIDUAL is provided to the module at initialization time. If +.I krb5.conf +uses a module directive, +.I kdc.conf +should also use one if it exists. + .PP The following sections are currently used in the .I krb5.conf -- 2.26.2