diff options
| author | Tom Yu <tlyu@mit.edu> | 2010-12-20 22:52:35 +0000 |
|---|---|---|
| committer | Tom Yu <tlyu@mit.edu> | 2010-12-20 22:52:35 +0000 |
| commit | de6b1720991641529071b73a35542d305460e026 (patch) | |
| tree | 4e46d17d838147a69e9ffef9c297c8ea1fc877c1 /src/config-files | |
| parent | 5934f212b7177a6f3b79b2d11bb1a1d9cd914bd3 (diff) | |
| download | krb5-de6b1720991641529071b73a35542d305460e026.tar.gz krb5-de6b1720991641529071b73a35542d305460e026.tar.xz krb5-de6b1720991641529071b73a35542d305460e026.zip | |
Document rdns libdefault setting
ticket: 6794
tags: pullup
target_version: 1.9
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24584 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/config-files')
| -rw-r--r-- | src/config-files/krb5.conf.M | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/src/config-files/krb5.conf.M b/src/config-files/krb5.conf.M index d03a1f468b..df62d4d524 100644 --- a/src/config-files/krb5.conf.M +++ b/src/config-files/krb5.conf.M @@ -18,7 +18,7 @@ .\" M.I.T. makes no representations about the suitability of .\" this software for any purpose. It is provided "as is" without express .\" or implied warranty. -.\" " +.\" .TH KRB5.CONF 5 .SH NAME krb5.conf \- Kerberos configuration file @@ -268,6 +268,13 @@ The default value for this flag is false. If this flag is set, initial tickets by default will be proxiable. The default value for this flag is false. +.IP rdns +If set to false, prevent the use of reverse DNS resolution when +translating hostnames into service principal names. Defaults to +true. Setting this flag to false is more secure, but may force +users to exclusively use fully qualified domain names when +authenticating to services. + .SH APPDEFAULTS SECTION Each tag in the [appdefaults] section names a Kerberos V5 application |