From 5843ad321944a028f6dee7e1fd4f9381c4953d07 Mon Sep 17 00:00:00 2001 From: Sumit Bose Date: Thu, 18 Nov 2010 12:48:05 +0100 Subject: Add support for FAST in krb5 provider --- src/man/sssd-krb5.5.xml | 35 +++++++++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) (limited to 'src/man') diff --git a/src/man/sssd-krb5.5.xml b/src/man/sssd-krb5.5.xml index d1341d9b2..5219086b2 100644 --- a/src/man/sssd-krb5.5.xml +++ b/src/man/sssd-krb5.5.xml @@ -358,6 +358,41 @@ + + krb5_use_fast (string) + + + Enables flexible authentication secure tunneling + (FAST) for Kerberos pre-authentication. The + following options are supported: + + + never use FAST, this is + equivalent to not set this option at all. + + + try to use FAST, if the server + does not support fast continue without. + + + demand to use FAST, fail if the + server does not require fast. + + + Default: not set, i.e. FAST is not used. + + + Please note that a keytab is required to use fast. + + + Please note also that sssd supports fast only with + MIT Kerberos version 1.8 and above. If sssd used + used with an older version using this option is a + configuration error. + + + + -- cgit