krb5.git/doc/admin, branch master-mechdconf Unnamed repository; edit this file 'description' to name the repository. Document reading of /etc/gss/mech.d/*.conf files. 2014-04-10T13:30:58+00:00 Günther Deschner gdeschner@redhat.com 2014-04-07T10:10:34+00:00 b3b6b780c8717d33db0e1665b285f01601614481 Signed-off-by: Günther Deschner <gdeschner@redhat.com> 
Signed-off-by: Günther Deschner <gdeschner@redhat.com>
Improve salt type display in kadmin getprinc 2014-03-26T22:12:31+00:00 Greg Hudson ghudson@mit.edu 2014-03-21T22:07:41+00:00 54c97cd0c435f78880d80541a20cf7f08928705d In krb5_salttype_to_string, output the salt type name we would recognize as input. In the output of getprinc, display the enctype and salt type in a form we would accept--either enctype:salttype if the salt type is not the default, or just the enctype if it is. Update t_mkey.py and t_salt.py to expect the new output format. Update documentation examples to show the new format. ticket: 5958 
In krb5_salttype_to_string, output the salt type name we would
recognize as input.

In the output of getprinc, display the enctype and salt type in a form
we would accept--either enctype:salttype if the salt type is not the
default, or just the enctype if it is.

Update t_mkey.py and t_salt.py to expect the new output format.
Update documentation examples to show the new format.

ticket: 5958
Update example kadmin getprinc enctype display 2014-03-26T22:12:31+00:00 Greg Hudson ghudson@mit.edu 2014-03-26T19:57:08+00:00 3890d1dff87a839efec38a77dcc88574ed65f4a9 In kadmin_local.rst, update the example to reflect the new way we display enctypes after #5014. ticket: 7890 (new) target_version: 1.12.2 tags: pullup 
In kadmin_local.rst, update the example to reflect the new way we
display enctypes after #5014.

ticket: 7890 (new)
target_version: 1.12.2
tags: pullup
Update iprop_master_ulogsize documentation 2014-03-13T14:44:13+00:00 Greg Hudson ghudson@mit.edu 2014-03-07T15:37:48+00:00 5fa7e666bd81a2222b155bdf3f0c3fc1bc3fabf5 When we removed the maximum number of ulog entries (#7368), we did not update the documentation for that parameter in kdc.conf. Reported by Richard Basch. ticket: 7849 target_version: 1.12.2 tags: pullup 
When we removed the maximum number of ulog entries (#7368), we did not
update the documentation for that parameter in kdc.conf.  Reported by
Richard Basch.

ticket: 7849
target_version: 1.12.2
tags: pullup
Correct docs for "kdb5_util load" switches 2014-02-28T19:34:49+00:00 Jeff D'Angelo jcd@psu.edu 2014-02-28T14:47:30+00:00 2d0f2fa48df1ea81363de5c78ab7e8cf1ab6d214 Remove obsolete parenthetical statement in the description of the "-update" switch to "kdb5_util load". Using the "-update" flag to load a second dump made using the "-ov" switch is no longer necessary now that the "-r13" format is the default. Add statement that the "-b7" dump format was the default for versions prior to 1.2.2 (to match the statement from "dump" section). [tlyu@mit.edu: commit message] ticket: 7865 tags: pullup target_version: 1.12.2 
Remove obsolete parenthetical statement in the description of the
"-update" switch to "kdb5_util load".  Using the "-update" flag to
load a second dump made using the "-ov" switch is no longer necessary
now that the "-r13" format is the default.  Add statement that the
"-b7" dump format was the default for versions prior to 1.2.2 (to
match the statement from "dump" section).

[tlyu@mit.edu: commit message]

ticket: 7865
tags: pullup
target_version: 1.12.2
Update kadmin set_string document 2014-02-26T16:54:20+00:00 Zhanna Tsitkov tsitkova@mit.edu 2014-02-24T19:17:43+00:00 1121a7fa68f44167471dc94cf5795a838587e84c Added 'otp' as an acceptable attribute name. Added examples. Also, x-ref kadmin document from otp.rst. 
Added 'otp' as an acceptable attribute name.  Added examples.
Also, x-ref kadmin document from otp.rst.
Document hierarchical iprop 2014-02-21T02:11:29+00:00 Greg Hudson ghudson@mit.edu 2014-01-28T19:19:33+00:00 e87bba2e8a8c753b761227dda5f2e216a6771db2 Also remove an outdated caveat, but add a new one about policy changes causing full resyncs. ticket: 7855 
Also remove an outdated caveat, but add a new one about policy changes
causing full resyncs.

ticket: 7855
Implement kpropd -A 2014-02-21T01:45:55+00:00 Greg Hudson ghudson@mit.edu 2014-01-27T03:18:18+00:00 90c11ff42008a90a72ee71444b0ad799e38b7ff0 The -A option causes kpropd to contact a specified admin server (normally an intermediate slave running kadmind -proponly) instead of the master admin server. Based on code submitted by Richard Basch. ticket: 7855 
The -A option causes kpropd to contact a specified admin server
(normally an intermediate slave running kadmind -proponly) instead of
the master admin server.

Based on code submitted by Richard Basch.

ticket: 7855
Implement kadmind -proponly 2014-02-21T01:45:55+00:00 Greg Hudson ghudson@mit.edu 2014-01-26T23:11:56+00:00 2ed8ebf18809af66aeaa2af6984754bdbefff500 The -proponly option causes kadmind to only service the iprop service, not the kpasswd or kadmin services. An intermediate slave in a hierarchical iprop setup runs kadmind -proponly in order to provide incremental updates to downstream slaves. Based on code submitted by Richard Basch. ticket: 7855 
The -proponly option causes kadmind to only service the iprop service,
not the kpasswd or kadmin services.  An intermediate slave in a
hierarchical iprop setup runs kadmind -proponly in order to provide
incremental updates to downstream slaves.

Based on code submitted by Richard Basch.

ticket: 7855
Document 1.12 changes in MIT Kerberos Features doc 2014-02-19T19:48:37+00:00 Zhanna Tsitkov tsitkova@mit.edu 2014-02-14T21:17:47+00:00 5489cb326bc5b13c9dcb0f76228cc964dd9fdb5d ticket: 7857 
ticket: 7857