diff options
-rw-r--r-- | doc/admin.texinfo | 7 | ||||
-rw-r--r-- | src/config-files/krb5.conf.M | 9 |
2 files changed, 15 insertions, 1 deletions
diff --git a/doc/admin.texinfo b/doc/admin.texinfo index 0c5325466f..5051b5d3f7 100644 --- a/doc/admin.texinfo +++ b/doc/admin.texinfo @@ -615,6 +615,13 @@ The default value for this flag is @value{DefaultForwardable}. If this flag is set, initial tickets by default will be proxiable. The default value for this flag is @value{DefaultProxiable}. +@itemx rdns +If set to false, prevent the use of reverse DNS resolution when +translating hostnames into service principal names. Defaults to +true. Setting this flag to false is more secure, but may force +users to exclusively use fully qualified domain names when +authenticating to services. + @end table diff --git a/src/config-files/krb5.conf.M b/src/config-files/krb5.conf.M index d03a1f468b..df62d4d524 100644 --- a/src/config-files/krb5.conf.M +++ b/src/config-files/krb5.conf.M @@ -18,7 +18,7 @@ .\" M.I.T. makes no representations about the suitability of .\" this software for any purpose. It is provided "as is" without express .\" or implied warranty. -.\" " +.\" .TH KRB5.CONF 5 .SH NAME krb5.conf \- Kerberos configuration file @@ -268,6 +268,13 @@ The default value for this flag is false. If this flag is set, initial tickets by default will be proxiable. The default value for this flag is false. +.IP rdns +If set to false, prevent the use of reverse DNS resolution when +translating hostnames into service principal names. Defaults to +true. Setting this flag to false is more secure, but may force +users to exclusively use fully qualified domain names when +authenticating to services. + .SH APPDEFAULTS SECTION Each tag in the [appdefaults] section names a Kerberos V5 application |