summaryrefslogtreecommitdiff
path: root/config/keytab.acl
diff options
context:
space:
mode:
authorRuss Allbery <rra@stanford.edu>2006-09-13 23:55:24 +0000
committerRuss Allbery <rra@stanford.edu>2006-09-13 23:55:24 +0000
commit34bd4abba82885bb74361d8af0ac6bb7e708c498 (patch)
treeb926b5da6cdb66f101d73fe121ef739929102a04 /config/keytab.acl
parent6172f4bfa2562a042c6dbd5b81d50d333a7793ef (diff)
Add the config stubs for the keytab-backend program.
Diffstat (limited to 'config/keytab.acl')
-rw-r--r--config/keytab.acl6
1 files changed, 6 insertions, 0 deletions
diff --git a/config/keytab.acl b/config/keytab.acl
new file mode 100644
index 0000000..c55ae46
--- /dev/null
+++ b/config/keytab.acl
@@ -0,0 +1,6 @@
+# /etc/remctl/acl/keytab -- ACL for keytab retrieval.
+#
+# This is the ACL controlling who can retrieve keytabs for the existing
+# keys of principals matching lines in /etc/krb5kdc/allow-extract. It
+# usually should only contain one principal, the principal of the wallet
+# server.