From 6b86e7541287dc474307fa15d76aeb976a2374cf Mon Sep 17 00:00:00 2001 From: Tom Yu Date: Fri, 23 May 2003 23:01:45 +0000 Subject: [PATCH] * admin.texinfo (appdefaults): Clarify afs_krb5 slightly ticket: 1192 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15486 dc483132-0cff-0310-8789-dd5450dbe970 --- doc/ChangeLog | 4 ++++ doc/admin.texinfo | 12 ++++++------ 2 files changed, 10 insertions(+), 6 deletions(-) diff --git a/doc/ChangeLog b/doc/ChangeLog index 18d239039..6e040f8fb 100644 --- a/doc/ChangeLog +++ b/doc/ChangeLog @@ -1,3 +1,7 @@ +2003-05-23 Tom Yu + + * admin.texinfo (appdefaults): Clarify afs_krb5 slightly. + 2003-05-22 Sam Hartman * admin.texinfo (appdefaults): Describe afs_krb5 diff --git a/doc/admin.texinfo b/doc/admin.texinfo index d35246911..468d63309 100644 --- a/doc/admin.texinfo +++ b/doc/admin.texinfo @@ -610,13 +610,13 @@ The list of specifiable options for each application may be found in that application's man pages. The application defaults specified here are overridden by those specified in the [realms] section. -A special application (afs_krb5) is used by the krb524 service -to know whether new format AFS tickets based on Kerberos 5 can be used +A special application name (afs_krb5) is used by the krb524 service to +know whether new format AFS tokens based on Kerberos 5 can be used rather than the older format which used a converted Kerberos 4 ticket. The new format allows for cross-realm authentication without introducing a security hole. It is used by default. Older AFS servers (before OpenAFS 1.2.8) will not support the new format. If -servers in your cell do not support the new format you will need to +servers in your cell do not support the new format, you will need to add an @code{afs_krb5} relation to the @code{appdefaults} section. The following config file shows how to disable new format AFS tickets for the @code{afs.example.com} cell in the @code{EXAMPLE.COM} realm. @@ -624,9 +624,9 @@ for the @code{afs.example.com} cell in the @code{EXAMPLE.COM} realm. @smallexample @group [appdefaults] -afs_krb5 = @{ - EXAMPLE.COM = @{ - afs/afs.example.com = false + afs_krb5 = @{ + EXAMPLE.COM = @{ + afs/afs.example.com = false @} @} -- 2.26.2