summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorStephen Gallagher <sgallagh@redhat.com>2011-09-08 15:04:32 -0400
committerStephen Gallagher <sgallagh@redhat.com>2011-09-20 10:46:23 -0400
commit52220ada2af676a07eb3aa4a3662074ee37dd218 (patch)
treec49d7e4281ffc4283d78ede8721d2cd56ca9d922
parentac6cd91f183c4d11d5f0eef369e89f6e9213a4f8 (diff)
downloadsssd_unused-52220ada2af676a07eb3aa4a3662074ee37dd218.tar.gz
sssd_unused-52220ada2af676a07eb3aa4a3662074ee37dd218.tar.xz
sssd_unused-52220ada2af676a07eb3aa4a3662074ee37dd218.zip
MAN: Add more information about internal credential storage
-rw-r--r--src/man/sssd-krb5.5.xml5
-rw-r--r--src/man/sssd.conf.5.xml4
2 files changed, 8 insertions, 1 deletions
diff --git a/src/man/sssd-krb5.5.xml b/src/man/sssd-krb5.5.xml
index 491e0442..92808dd3 100644
--- a/src/man/sssd-krb5.5.xml
+++ b/src/man/sssd-krb5.5.xml
@@ -260,7 +260,10 @@
</para>
<para>
Please note that this feature currently only
- available on a Linux platform.
+ available on a Linux platform. Passwords stored in
+ this way are kept in plaintext in the kernel
+ keyring and are potentially accessible by the root
+ user (with difficulty).
</para>
<para>
Default: false
diff --git a/src/man/sssd.conf.5.xml b/src/man/sssd.conf.5.xml
index f5119433..bed06eb5 100644
--- a/src/man/sssd.conf.5.xml
+++ b/src/man/sssd.conf.5.xml
@@ -697,6 +697,10 @@
in the local LDB cache
</para>
<para>
+ User credentials are stored in a SHA512 hash, not
+ in plaintext
+ </para>
+ <para>
Default: FALSE
</para>
</listitem>