diff options
Diffstat (limited to 'src')
| -rw-r--r-- | src/config-files/ChangeLog | 5 | ||||
| -rw-r--r-- | src/config-files/krb5.conf.M | 12 |
2 files changed, 17 insertions, 0 deletions
diff --git a/src/config-files/ChangeLog b/src/config-files/ChangeLog index b5f4e415d5..2a2fa8b42e 100644 --- a/src/config-files/ChangeLog +++ b/src/config-files/ChangeLog @@ -1,3 +1,8 @@ +Fri Sep 1 23:26:46 1995 Theodore Y. Ts'o <tytso@dcl> + + * krb5.conf.M: Add documentation for the clockskew and + kdc_timesync relations in the libdefaults section. + Thu Aug 24 19:24:26 1995 Theodore Y. Ts'o <tytso@dcl> * .Sanitize: Update file list diff --git a/src/config-files/krb5.conf.M b/src/config-files/krb5.conf.M index 4721dcd946..0a0c00fcfe 100644 --- a/src/config-files/krb5.conf.M +++ b/src/config-files/krb5.conf.M @@ -90,6 +90,18 @@ The following relations are defined in the [libdefaults] section: This relation identifies the default realm to be used in a client host's Kerberos activity. +.IP clockskew +This relation sets the maximum allowable amount of clockskew in +seconds that the library will tolerate before assuming that a Kerberos +message is invalid. The default value is 300 seconds, or five +minutes. + +.IP kdc_timesync +If the value of this relation is non-zero, the library will compute +the difference between the system clock and the time returned by the +KDC and in order to correct for an inaccurate system clock. This +corrective factor is only used by the Kerberos library. + .SH REALMS SECTION Each tag in the [realms] section of the file names a Kerberos realm. |