summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--doc/admin.texinfo24
-rw-r--r--doc/definitions.texinfo9
2 files changed, 32 insertions, 1 deletions
diff --git a/doc/admin.texinfo b/doc/admin.texinfo
index e3b4b7656..a58cf5675 100644
--- a/doc/admin.texinfo
+++ b/doc/admin.texinfo
@@ -1,4 +1,4 @@
-x\input texinfo-suppl.tex % contains @doubleleftarrow{} definition
+\input texinfo-suppl.tex % contains @doubleleftarrow{} definition
% this line must come *before* \input texinfo
\input texinfo @c -*-texinfo-*-
@c %**start of header
@@ -544,6 +544,28 @@ If the message is smaller than @code{udp_preference_list}, then UDP
will be tried before TCP. Regardless of the size, both protocols will
be tried if the first attempt fails.
+@itemx verify_ap_req_nofail
+If this flag is set, then an attempt to get initial credentials will
+fail if the client machine does not have a keytab. The default for the
+flag is @value{DefaultVerifyApReqNofail}.
+
+@itemx renew_lifetime
+The value of this tag is the default renewable lifetime for
+initial tickets. The default value for the tag is
+@value{DefaultRenewLifetime}.
+
+@itemx noaddresses
+Setting this flag causes the initial Kerberos ticket to be addressless.
+The default for the flag is @value{DefaultNoaddresses}.
+
+@itemx forwardable
+If this flag is set, initial tickets by default will be forwardable.
+The default value for this flag is @value{DefaultForwardable}.
+
+@itemx proxiable
+If this flag is set, initial tickets by default will be proxiable.
+The default value for this flag is @value{DefaultProxiable}.
+
@end table
@node appdefaults, login, libdefaults, krb5.conf
diff --git a/doc/definitions.texinfo b/doc/definitions.texinfo
index 757bd5a43..138c38040 100644
--- a/doc/definitions.texinfo
+++ b/doc/definitions.texinfo
@@ -182,3 +182,12 @@ the following are based on variables in krb5/src/include/kerberosIV/krbports.h
@comment KRB_CONF
@set DefaultKrb4Realms /etc/krb.realms
@comment KRB_RLM_TRANS
+
+@comment krb5/src/lib/krb5/krb/get_in_tkt.c
+@set DefaultRenewLifetime 0
+@set DefaultNoaddresses not set @comment _krb5_conf_boolean defaults to no
+@set DefaultForwardable not set
+@set DefaultProxiable not set
+
+@comment lib/krb5/krb/vfy_increds.c
+@set DefaultVerifyApReqNofail not set