path: root/ipa-client/man
diff options
authorSimo Sorce <>2008-04-08 18:02:42 -0400
committerSimo Sorce <>2008-04-08 18:02:42 -0400
commit70d3717e8bd8e71641a04471cd49cd75fbe465a1 (patch)
tree5fe686dcd770e54826f77bb04b97d1bf9e52bebc /ipa-client/man
parentc45d58cc3fddf67bd787549aecc5741cdb35cc8a (diff)
Add --permitted-enctypes command and add it to the man page too
Diffstat (limited to 'ipa-client/man')
1 files changed, 21 insertions, 0 deletions
diff --git a/ipa-client/man/ipa-getkeytab.1 b/ipa-client/man/ipa-getkeytab.1
index 2971091..90fba04 100644
--- a/ipa-client/man/ipa-getkeytab.1
+++ b/ipa-client/man/ipa-getkeytab.1
@@ -62,10 +62,31 @@ created if not existing).
\fB\-e encryption-types\fR
The list of encryption types to use to generate keys.
ipa-getkeytab will use local client defaults if not provided.
+Valid values depend on the kerberos library version and configuration.
+Common values are:
Keep quiet.
+This options returns a description of the permitted encryption types, like this:
+Supported encryption types:
+AES-256 CTS mode with 96-bit SHA-1 HMAC
+AES-128 CTS mode with 96-bit SHA-1 HMAC
+Triple DES cbc mode with HMAC/sha1
+ArcFour with HMAC/md5
+DES cbc mode with CRC-32
+DES cbc mode with RSA-MD5
+DES cbc mode with RSA-MD4
Add and retrieve a keytab for the ldap service principal on