diff options
| author | Russ Allbery <rra@stanford.edu> | 2010-02-09 13:42:01 -0800 |
|---|---|---|
| committer | Russ Allbery <rra@stanford.edu> | 2010-02-09 13:42:01 -0800 |
| commit | 1ec1398452733d861b1b68253e6de0b8cb9f757f (patch) | |
| tree | 455a80c64340b9012f8cf3472dc6539366c7e396 /server | |
| parent | cbdc17af5f7a772188638f0057fffd357acbbd38 (diff) | |
Remove the sync documentation from wallet-backend
The code to support the attribute is still present in case we add a
system with which to synchronize later on.
Diffstat (limited to 'server')
| -rwxr-xr-x | server/wallet-backend | 20 |
1 files changed, 0 insertions, 20 deletions
diff --git a/server/wallet-backend b/server/wallet-backend index 2b58255..0770f97 100755 --- a/server/wallet-backend +++ b/server/wallet-backend @@ -571,26 +571,6 @@ Keytabs retrieved with C<unchanging> set will contain all keys present in the KDC for that Kerberos principal and therefore may contain different enctypes than those requested by this attribute. -=item sync - -Sets the external systems to which the key of a given principal is -synchronized. The only supported value for this attribute is C<kaserver>, -which says to synchronize the key with an AFS Kerberos v4 kaserver. - -If this attribute is set on a keytab, whenever the C<get> command is run for -that keytab, the DES key will be extracted from that keytab and set in the -configured AFS kaserver. The Kerberos v4 principal name will be the same as -the Kerberos v5 principal name except that the components are separated by -C<.> instead of C</>; the second component is truncated after the first C<.> -if the first component is one of C<host>, C<ident>, C<imap>, C<pop>, or -C<smtp>; and the first component is C<rcmd> if the Kerberos v5 principal -component is C<host>. The principal name must not contain more than two -components. - -If this attribute is set, calling C<destroy> will also destroy the -principal from the AFS kaserver, with a principal mapping determined as -above. - =back =head1 SEE ALSO |