summaryrefslogtreecommitdiffstats
path: root/doc/rst_source
diff options
context:
space:
mode:
authorGreg Hudson <ghudson@mit.edu>2012-03-16 13:57:31 +0000
committerGreg Hudson <ghudson@mit.edu>2012-03-16 13:57:31 +0000
commitedd6e63d3b83b7c7cdb2e36254c641daa1077fc4 (patch)
tree073221b027ea2cc2ad5aa48aef308c0aced557c4 /doc/rst_source
parent504d0a74a5e4550679a14e97604732f0421f9605 (diff)
Document the ccselect interface in krb5.conf
r25158 (#6957) omitted krb5.conf documentation for the ccselect interface. Add it now. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25773 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'doc/rst_source')
-rw-r--r--doc/rst_source/krb_admins/conf_files/krb5_conf.rst21
1 files changed, 19 insertions, 2 deletions
diff --git a/doc/rst_source/krb_admins/conf_files/krb5_conf.rst b/doc/rst_source/krb_admins/conf_files/krb5_conf.rst
index b8e51d41f..83027a011 100644
--- a/doc/rst_source/krb_admins/conf_files/krb5_conf.rst
+++ b/doc/rst_source/krb_admins/conf_files/krb5_conf.rst
@@ -638,6 +638,24 @@ All subsections support the same tags:
The following subsections are currently supported within the [plugins]
section:
+.. _ccselect:
+
+ccselect interface
+##################
+
+The ccselect subsection controls modules for credential cache
+selection within a cache collection. In addition to any registered
+dynamic modules, the following built-in modules exist (and may be
+disabled with the disable tag):
+
+**k5identity**
+ Uses a .k5identity file in the user's home directory to select a
+ client principal
+
+**realm**
+ Uses the service realm to guess an appropriate cache from the
+ collection
+
.. _pwqual:
pwqual interface
@@ -645,8 +663,7 @@ pwqual interface
The pwqual subsection controls modules for the password quality
interface, which is used to reject weak passwords when passwords are
-changed. In addition to any registered dynamic modules, the following
-built-in modules exist (and may be disabled with the disable tag):
+changed. The following built-in modules exist for this interface:
**dict**
Checks against the realm dictionary file