Document the ccselect interface in krb5.conf

r25158 (#6957) omitted krb5.conf documentation for the ccselect
interface.  Add it now.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25773 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/doc/rst_source/krb_admins/conf_files/krb5_conf.rst b/doc/rst_source/krb_admins/conf_files/krb5_conf.rst
index b8e51d41f8203236c4c8859e29a01264b7c76443..83027a0112a28e8fcf3568eb4bd2f6488fdbd14d 100644 (file)
--- a/doc/rst_source/krb_admins/conf_files/krb5_conf.rst
+++ b/doc/rst_source/krb_admins/conf_files/krb5_conf.rst
@@ -638,6 +638,24 @@ All subsections support the same tags:
 The following subsections are currently supported within the [plugins]
 section:
 
+.. _ccselect:
+
+ccselect interface
+##################
+
+The ccselect subsection controls modules for credential cache
+selection within a cache collection.  In addition to any registered
+dynamic modules, the following built-in modules exist (and may be
+disabled with the disable tag):
+
+**k5identity**
+    Uses a .k5identity file in the user's home directory to select a
+    client principal
+
+**realm**
+    Uses the service realm to guess an appropriate cache from the
+    collection
+
 .. _pwqual:
 
 pwqual interface
@@ -645,8 +663,7 @@ pwqual interface
 
 The pwqual subsection controls modules for the password quality
 interface, which is used to reject weak passwords when passwords are
-changed.  In addition to any registered dynamic modules, the following
-built-in modules exist (and may be disabled with the disable tag):
+changed.  The following built-in modules exist for this interface:
 
 **dict**
     Checks against the realm dictionary file