From 16c2fc19f3955afa1e6579e450594253a7e0a69a Mon Sep 17 00:00:00 2001 From: Russ Allbery Date: Tue, 9 Oct 2007 19:05:45 +0000 Subject: Add user documentation for the enctypes attribute on keytabs. Mention that the enctype must be in the database in the keytab object API documentation. The README and NEWS files are now done. --- client/wallet.pod | 12 ++++++++++++ 1 file changed, 12 insertions(+) (limited to 'client/wallet.pod') diff --git a/client/wallet.pod b/client/wallet.pod index 6d325e9..28b472d 100644 --- a/client/wallet.pod +++ b/client/wallet.pod @@ -287,6 +287,18 @@ Keytab objects support the following attributes: =over 4 +=item enctypes + +Restricts the generated keytab to a specific set of encryption types. The +values of this attribute must be enctype strings recognized by Kerberos +(strings like C or C). Note that the salt should +not be included; since the salt is irrelevant for keytab keys, it will +always be set to C by the wallet. + +If this attribute is set, the specified enctype list will be passed to ktadd +when get() is called for that keytab. If it is not set, the default set in +the KDC will be used. + =item sync Sets the external systems to which the key of a given principal is -- cgit v1.2.3