From 16c2fc19f3955afa1e6579e450594253a7e0a69a Mon Sep 17 00:00:00 2001 From: Russ Allbery Date: Tue, 9 Oct 2007 19:05:45 +0000 Subject: Add user documentation for the enctypes attribute on keytabs. Mention that the enctype must be in the database in the keytab object API documentation. The README and NEWS files are now done. --- perl/Wallet/Object/Keytab.pm | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) (limited to 'perl/Wallet/Object/Keytab.pm') diff --git a/perl/Wallet/Object/Keytab.pm b/perl/Wallet/Object/Keytab.pm index 34eb171..efe5a34 100644 --- a/perl/Wallet/Object/Keytab.pm +++ b/perl/Wallet/Object/Keytab.pm @@ -748,9 +748,11 @@ supported: Restricts the generated keytab to a specific set of encryption types. The values of this attribute must be enctype strings recognized by Kerberos -(strings like C or C). Note that the salt should -not be included; since the salt is irrelevant for keytab keys, it will -always be set to C by the wallet. +(strings like C or C). Encryption types must also +be present in the list of supported enctypes stored in the database database +or the attr() method will reject them. Note that the salt should not be +included; since the salt is irrelevant for keytab keys, it will always be +set to C by the wallet. If this attribute is set, the specified enctype list will be passed to ktadd when get() is called for that keytab. If it is not set, the default -- cgit v1.2.3