From e3a6ff820b83997f9a668a24c2dad8c26fefc5e7 Mon Sep 17 00:00:00 2001 From: Greg Hudson Date: Tue, 2 Aug 2011 20:59:19 +0000 Subject: [PATCH] Document some variables in the right section database_name, disable_last_success, and disable_lockout should be under dbmodules, not dbdefaults. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25067 dc483132-0cff-0310-8789-dd5450dbe970 --- src/config-files/krb5.conf.M | 34 +++++++++++++++++----------------- 1 file changed, 17 insertions(+), 17 deletions(-) diff --git a/src/config-files/krb5.conf.M b/src/config-files/krb5.conf.M index 70239e210..dae196c14 100644 --- a/src/config-files/krb5.conf.M +++ b/src/config-files/krb5.conf.M @@ -646,23 +646,6 @@ The following tags are used in this section: This relation indicates the name of the configuration section under dbmodules for database specific parameters used by the loadable database library. -.IP database_name -This DB2-specific tag indicates the location of the database in the -filesystem. - -.IP disable_last_success -If set to true, suppresses KDC updates to the "Last successful -authentication" field of principal entries requiring -preauthentication. Setting this flag may improve performance. -(Principal entries which do not require preauthentication never update -the "Last successful authentication" field.) - -.IP disable_lockout -If set to true, suppresses KDC updates to the "Last failed -authentication" and "Failed password attempts" fields of principal -entries requiring preauthentication. Setting this flag may improve -performance, but also disables account lockout. - .IP ldap_kerberos_container_dn This LDAP specific tag indicates the DN of the container object where the realm objects will be located. This value is used if no object DN is mentioned in the @@ -704,10 +687,27 @@ define the database specific parameters. .PP For each section, the following tags may be specified in the subsection: +.IP database_name +This DB2-specific tag indicates the location of the database in the +filesystem. + .IP db_library This tag indicates the name of the loadable database library. The value should be db2 for db2 database and kldap for LDAP database. +.IP disable_last_success +If set to true, suppresses KDC updates to the "Last successful +authentication" field of principal entries requiring +preauthentication. Setting this flag may improve performance. +(Principal entries which do not require preauthentication never update +the "Last successful authentication" field.) + +.IP disable_lockout +If set to true, suppresses KDC updates to the "Last failed +authentication" and "Failed password attempts" fields of principal +entries requiring preauthentication. Setting this flag may improve +performance, but also disables account lockout. + .IP ldap_kerberos_container_dn This LDAP specific tag indicates the DN of the container object where the realm objects will be located. -- 2.26.2