diff options
| author | Sumit Bose <sbose@redhat.com> | 2010-11-18 12:48:05 +0100 |
|---|---|---|
| committer | Stephen Gallagher <sgallagh@redhat.com> | 2010-12-07 17:09:19 -0500 |
| commit | 5843ad321944a028f6dee7e1fd4f9381c4953d07 (patch) | |
| tree | fe7087c3ebb948e0269ef613a1cea06111c2cfc3 /src/man | |
| parent | 263c8d47ca21d3bacd77266613fcc7baab988465 (diff) | |
| download | sssd-5843ad321944a028f6dee7e1fd4f9381c4953d07.tar.gz sssd-5843ad321944a028f6dee7e1fd4f9381c4953d07.tar.xz sssd-5843ad321944a028f6dee7e1fd4f9381c4953d07.zip | |
Add support for FAST in krb5 provider
Diffstat (limited to 'src/man')
| -rw-r--r-- | src/man/sssd-krb5.5.xml | 35 |
1 files changed, 35 insertions, 0 deletions
diff --git a/src/man/sssd-krb5.5.xml b/src/man/sssd-krb5.5.xml index d1341d9b2..5219086b2 100644 --- a/src/man/sssd-krb5.5.xml +++ b/src/man/sssd-krb5.5.xml @@ -358,6 +358,41 @@ </listitem> </varlistentry> + <varlistentry> + <term>krb5_use_fast (string)</term> + <listitem> + <para> + Enables flexible authentication secure tunneling + (FAST) for Kerberos pre-authentication. The + following options are supported: + </para> + <para> + <emphasis>never</emphasis> use FAST, this is + equivalent to not set this option at all. + </para> + <para> + <emphasis>try</emphasis> to use FAST, if the server + does not support fast continue without. + </para> + <para> + <emphasis>demand</emphasis> to use FAST, fail if the + server does not require fast. + </para> + <para> + Default: not set, i.e. FAST is not used. + </para> + <para> + Please note that a keytab is required to use fast. + </para> + <para> + Please note also that sssd supports fast only with + MIT Kerberos version 1.8 and above. If sssd used + used with an older version using this option is a + configuration error. + </para> + </listitem> + </varlistentry> + </variablelist> </para> </refsect1> |