summaryrefslogtreecommitdiffstats
path: root/src/include
diff options
context:
space:
mode:
authorTheodore Tso <tytso@mit.edu>1992-09-24 23:19:55 +0000
committerTheodore Tso <tytso@mit.edu>1992-09-24 23:19:55 +0000
commita2ffdd033cd5f3bcf0f08a9d3a74e7b3d634ab94 (patch)
tree4b83879c3c7579b0098a5435630713cd15c291ea /src/include
parent1d9fc00b0c731d4cc9562d839c8bc2e44329f637 (diff)
downloadkrb5-a2ffdd033cd5f3bcf0f08a9d3a74e7b3d634ab94.tar.gz
krb5-a2ffdd033cd5f3bcf0f08a9d3a74e7b3d634ab94.tar.xz
krb5-a2ffdd033cd5f3bcf0f08a9d3a74e7b3d634ab94.zip
Added sample (un)defines for KRBCONF_VAGUE_ERRORS and
KRBCONF_KDC_MODIFIES_KDB git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@2394 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/include')
-rw-r--r--src/include/krb5/stock/config.h18
1 files changed, 18 insertions, 0 deletions
diff --git a/src/include/krb5/stock/config.h b/src/include/krb5/stock/config.h
index 314ee1f793..2d6a1f3a05 100644
--- a/src/include/krb5/stock/config.h
+++ b/src/include/krb5/stock/config.h
@@ -154,5 +154,23 @@ typedef int krb5_sigtype;
#define KRB5_KDB_MAX_RLIFE (60*60*24*7) /* one week */
#define KRB5_KDB_EXPIRATION 2145830400 /* Thu Jan 1 00:00:00 2038 UTC */
+/*
+ * For paranoid DOE types that don't want to give helpful error
+ * messages to the client....er, attacker
+ */
+#undef KRBCONF_VAGUE_ERRORS
+
+/*
+ * Define this if you want the KDC to modify the Kerberos database;
+ * this allows the last request information to be updated, as well as
+ * the failure count information.
+ *
+ * Note that this doesn't work if you're using slave servers!!! It
+ * also causes the database to be modified (and thus need to be
+ * locked) frequently.
+ */
+#undef KRBCONF_KDC_MODIFIES_KDB
+
+
#endif /* KRB5_CONFIG__ */