summaryrefslogtreecommitdiffstats
path: root/src/config-files
diff options
context:
space:
mode:
Diffstat (limited to 'src/config-files')
-rw-r--r--src/config-files/krb5.conf.M17
1 files changed, 17 insertions, 0 deletions
diff --git a/src/config-files/krb5.conf.M b/src/config-files/krb5.conf.M
index 412156bdfa..5ecfd426c7 100644
--- a/src/config-files/krb5.conf.M
+++ b/src/config-files/krb5.conf.M
@@ -585,6 +585,23 @@ The following tags are used in this section:
This relation indicates the name of the configuration section under dbmodules
for database specific parameters used by the loadable database library.
+.IP database_name
+This DB2-specific tag indicates the location of the database in the
+filesystem.
+
+.IP disable_last_success
+If set to true, suppresses KDC updates to the "Last successful
+authentication" field of principal entries requiring
+preauthentication. Setting this flag may improve performance.
+(Principal entries which do not require preauthentication never update
+the "Last successful authentication" field.)
+
+.IP disable_lockout
+If set to true, suppresses KDC updates to the "Last failed
+authentication" and "Failed password attempts" fields of principal
+entries requiring preauthentication. Setting this flag may improve
+performance, but also disables account lockout.
+
.IP ldap_kerberos_container_dn
This LDAP specific tag indicates the DN of the container object where the realm
objects will be located. This value is used if no object DN is mentioned in the