From 2ed8ebf18809af66aeaa2af6984754bdbefff500 Mon Sep 17 00:00:00 2001 From: Greg Hudson Date: Sun, 26 Jan 2014 18:11:56 -0500 Subject: Implement kadmind -proponly The -proponly option causes kadmind to only service the iprop service, not the kpasswd or kadmin services. An intermediate slave in a hierarchical iprop setup runs kadmind -proponly in order to provide incremental updates to downstream slaves. Based on code submitted by Richard Basch. ticket: 7855 --- doc/admin/admin_commands/kadmind.rst | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'doc') diff --git a/doc/admin/admin_commands/kadmind.rst b/doc/admin/admin_commands/kadmind.rst index 09efd22e56..c863fc951d 100644 --- a/doc/admin/admin_commands/kadmind.rst +++ b/doc/admin/admin_commands/kadmind.rst @@ -11,6 +11,7 @@ SYNOPSIS [**-r** *realm*] [**-m**] [**-nofork**] +[**-proponly**] [**-port** *port-number*] [**-P** *pid_file*] [**-p** *kdb5_util_path*] @@ -74,6 +75,12 @@ OPTIONS associated to the terminal. In normal operation, you should allow the server to place itself in the background. +**-proponly** + causes the server to only listen and respond to Kerberos slave + incremental propagation polling requests. This option can be used + to set up a hierarchical propagation topology where a slave KDC + provides incremental updates to other Kerberos slaves. + **-port** *port-number* specifies the port on which the administration server listens for connections. The default port is determined by the -- cgit