diff options
Diffstat (limited to 'src/config-files')
| -rw-r--r-- | src/config-files/krb5.conf.M | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/src/config-files/krb5.conf.M b/src/config-files/krb5.conf.M index d03a1f468b..df62d4d524 100644 --- a/src/config-files/krb5.conf.M +++ b/src/config-files/krb5.conf.M @@ -18,7 +18,7 @@ .\" M.I.T. makes no representations about the suitability of .\" this software for any purpose. It is provided "as is" without express .\" or implied warranty. -.\" " +.\" .TH KRB5.CONF 5 .SH NAME krb5.conf \- Kerberos configuration file @@ -268,6 +268,13 @@ The default value for this flag is false. If this flag is set, initial tickets by default will be proxiable. The default value for this flag is false. +.IP rdns +If set to false, prevent the use of reverse DNS resolution when +translating hostnames into service principal names. Defaults to +true. Setting this flag to false is more secure, but may force +users to exclusively use fully qualified domain names when +authenticating to services. + .SH APPDEFAULTS SECTION Each tag in the [appdefaults] section names a Kerberos V5 application |