From 1ec1398452733d861b1b68253e6de0b8cb9f757f Mon Sep 17 00:00:00 2001 From: Russ Allbery Date: Tue, 9 Feb 2010 13:42:01 -0800 Subject: Remove the sync documentation from wallet-backend The code to support the attribute is still present in case we add a system with which to synchronize later on. --- server/wallet-backend | 20 -------------------- 1 file changed, 20 deletions(-) (limited to 'server') diff --git a/server/wallet-backend b/server/wallet-backend index 2b58255..0770f97 100755 --- a/server/wallet-backend +++ b/server/wallet-backend @@ -571,26 +571,6 @@ Keytabs retrieved with C set will contain all keys present in the KDC for that Kerberos principal and therefore may contain different enctypes than those requested by this attribute. -=item sync - -Sets the external systems to which the key of a given principal is -synchronized. The only supported value for this attribute is C, -which says to synchronize the key with an AFS Kerberos v4 kaserver. - -If this attribute is set on a keytab, whenever the C command is run for -that keytab, the DES key will be extracted from that keytab and set in the -configured AFS kaserver. The Kerberos v4 principal name will be the same as -the Kerberos v5 principal name except that the components are separated by -C<.> instead of C; the second component is truncated after the first C<.> -if the first component is one of C, C, C, C, or -C; and the first component is C if the Kerberos v5 principal -component is C. The principal name must not contain more than two -components. - -If this attribute is set, calling C will also destroy the -principal from the AFS kaserver, with a principal mapping determined as -above. - =back =head1 SEE ALSO -- cgit v1.2.3