diff options
| author | Russ Allbery <rra@stanford.edu> | 2007-10-09 19:05:45 +0000 |
|---|---|---|
| committer | Russ Allbery <rra@stanford.edu> | 2007-10-09 19:05:45 +0000 |
| commit | 16c2fc19f3955afa1e6579e450594253a7e0a69a (patch) | |
| tree | 828fc4bef99e463312467badd6b1e5c1d93ca462 /perl/Wallet/Object/Keytab.pm | |
| parent | 62b8ed8126729623199e47af565a6f69083ecee6 (diff) | |
Add user documentation for the enctypes attribute on keytabs. Mention
that the enctype must be in the database in the keytab object API
documentation.
The README and NEWS files are now done.
Diffstat (limited to 'perl/Wallet/Object/Keytab.pm')
| -rw-r--r-- | perl/Wallet/Object/Keytab.pm | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/perl/Wallet/Object/Keytab.pm b/perl/Wallet/Object/Keytab.pm index 34eb171..efe5a34 100644 --- a/perl/Wallet/Object/Keytab.pm +++ b/perl/Wallet/Object/Keytab.pm @@ -748,9 +748,11 @@ supported: Restricts the generated keytab to a specific set of encryption types. The values of this attribute must be enctype strings recognized by Kerberos -(strings like C<aes256-cts> or C<des-cbc-crc>). Note that the salt should -not be included; since the salt is irrelevant for keytab keys, it will -always be set to C<normal> by the wallet. +(strings like C<aes256-cts> or C<des-cbc-crc>). Encryption types must also +be present in the list of supported enctypes stored in the database database +or the attr() method will reject them. Note that the salt should not be +included; since the salt is irrelevant for keytab keys, it will always be +set to C<normal> by the wallet. If this attribute is set, the specified enctype list will be passed to ktadd when get() is called for that keytab. If it is not set, the default |