summaryrefslogtreecommitdiffstats
path: root/src/config-files/krb5.conf.M
diff options
context:
space:
mode:
authorTheodore Tso <tytso@mit.edu>1995-09-02 03:27:35 +0000
committerTheodore Tso <tytso@mit.edu>1995-09-02 03:27:35 +0000
commiteec1b51a6bf366311659fbeed97ef3c0e2e549a5 (patch)
treee1163751a557b4ee70cfe2d555a5eb904b601ab7 /src/config-files/krb5.conf.M
parent8adf58fadf9cf40e0e3c21b9c413e3ad7cfab1f0 (diff)
downloadkrb5-eec1b51a6bf366311659fbeed97ef3c0e2e549a5.tar.gz
krb5-eec1b51a6bf366311659fbeed97ef3c0e2e549a5.tar.xz
krb5-eec1b51a6bf366311659fbeed97ef3c0e2e549a5.zip
Add documentation for the clockskew and kdc_timesync relations in the
libdefaults section. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6655 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/config-files/krb5.conf.M')
-rw-r--r--src/config-files/krb5.conf.M12
1 files changed, 12 insertions, 0 deletions
diff --git a/src/config-files/krb5.conf.M b/src/config-files/krb5.conf.M
index 4721dcd946..0a0c00fcfe 100644
--- a/src/config-files/krb5.conf.M
+++ b/src/config-files/krb5.conf.M
@@ -90,6 +90,18 @@ The following relations are defined in the [libdefaults] section:
This relation identifies the default realm to be used in a client
host's Kerberos activity.
+.IP clockskew
+This relation sets the maximum allowable amount of clockskew in
+seconds that the library will tolerate before assuming that a Kerberos
+message is invalid. The default value is 300 seconds, or five
+minutes.
+
+.IP kdc_timesync
+If the value of this relation is non-zero, the library will compute
+the difference between the system clock and the time returned by the
+KDC and in order to correct for an inaccurate system clock. This
+corrective factor is only used by the Kerberos library.
+
.SH REALMS SECTION
Each tag in the [realms] section of the file names a Kerberos realm.