diff options
| author | Russ Allbery <rra@stanford.edu> | 2007-10-09 19:05:45 +0000 |
|---|---|---|
| committer | Russ Allbery <rra@stanford.edu> | 2007-10-09 19:05:45 +0000 |
| commit | 16c2fc19f3955afa1e6579e450594253a7e0a69a (patch) | |
| tree | 828fc4bef99e463312467badd6b1e5c1d93ca462 /client | |
| parent | 62b8ed8126729623199e47af565a6f69083ecee6 (diff) | |
Add user documentation for the enctypes attribute on keytabs. Mention
that the enctype must be in the database in the keytab object API
documentation.
The README and NEWS files are now done.
Diffstat (limited to 'client')
| -rw-r--r-- | client/wallet.pod | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/client/wallet.pod b/client/wallet.pod index 6d325e9..28b472d 100644 --- a/client/wallet.pod +++ b/client/wallet.pod @@ -287,6 +287,18 @@ Keytab objects support the following attributes: =over 4 +=item enctypes + +Restricts the generated keytab to a specific set of encryption types. The +values of this attribute must be enctype strings recognized by Kerberos +(strings like C<aes256-cts> or C<des-cbc-crc>). Note that the salt should +not be included; since the salt is irrelevant for keytab keys, it will +always be set to C<normal> by the wallet. + +If this attribute is set, the specified enctype list will be passed to ktadd +when get() is called for that keytab. If it is not set, the default set in +the KDC will be used. + =item sync Sets the external systems to which the key of a given principal is |