summaryrefslogtreecommitdiffstats
path: root/ipa-client/man
diff options
context:
space:
mode:
authorSimo Sorce <ssorce@redhat.com>2008-04-08 18:02:42 -0400
committerSimo Sorce <ssorce@redhat.com>2008-04-08 18:02:42 -0400
commit70d3717e8bd8e71641a04471cd49cd75fbe465a1 (patch)
tree5fe686dcd770e54826f77bb04b97d1bf9e52bebc /ipa-client/man
parentc45d58cc3fddf67bd787549aecc5741cdb35cc8a (diff)
downloadfreeipa-70d3717e8bd8e71641a04471cd49cd75fbe465a1.tar.gz
freeipa-70d3717e8bd8e71641a04471cd49cd75fbe465a1.tar.xz
freeipa-70d3717e8bd8e71641a04471cd49cd75fbe465a1.zip
Add --permitted-enctypes command and add it to the man page too
Diffstat (limited to 'ipa-client/man')
-rw-r--r--ipa-client/man/ipa-getkeytab.121
1 files changed, 21 insertions, 0 deletions
diff --git a/ipa-client/man/ipa-getkeytab.1 b/ipa-client/man/ipa-getkeytab.1
index 29710918a..90fba04d4 100644
--- a/ipa-client/man/ipa-getkeytab.1
+++ b/ipa-client/man/ipa-getkeytab.1
@@ -62,10 +62,31 @@ created if not existing).
\fB\-e encryption-types\fR
The list of encryption types to use to generate keys.
ipa-getkeytab will use local client defaults if not provided.
+Valid values depend on the kerberos library version and configuration.
+Common values are:
+aes256-cts
+aes128-cts
+des3-hmac-sha1
+arcfour-hmac
+des-hmac-sha1
+des-cbc-md5
+des-cbc-crc
\fB\-q\fR
Keep quiet.
+\fB\--permitted-enctypes\fR
+This options returns a description of the permitted encryption types, like this:
+Supported encryption types:
+AES-256 CTS mode with 96-bit SHA-1 HMAC
+AES-128 CTS mode with 96-bit SHA-1 HMAC
+Triple DES cbc mode with HMAC/sha1
+ArcFour with HMAC/md5
+DES cbc mode with CRC-32
+DES cbc mode with RSA-MD5
+DES cbc mode with RSA-MD4
+
+
.SH "EXAMPLES"
Add and retrieve a keytab for the ldap service principal on