>From 74544d3010a4062fe74df529cb4e00b87a66ea0c Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Mon, 17 Feb 2014 17:30:52 +0100 Subject: [PATCH] MAN: Clarify the new krb5_use_fast IPA default --- src/man/sssd-ipa.5.xml | 34 ++++++++++++++++++++++++++++++++++ src/man/sssd-krb5.5.xml | 2 +- 2 files changed, 35 insertions(+), 1 deletion(-) diff --git a/src/man/sssd-ipa.5.xml b/src/man/sssd-ipa.5.xml index bbee1f80a55d4c9743daca51efb47b4071e1ff7b..dfcc595deda736fd039cd60448f55256d765d39d 100644 --- a/src/man/sssd-ipa.5.xml +++ b/src/man/sssd-ipa.5.xml @@ -394,6 +394,40 @@ + krb5_use_fast (string) + + + Enables flexible authentication secure tunneling + (FAST) for Kerberos pre-authentication. The + following options are supported: + + + never use FAST. + + + try to use FAST. If the server + does not support FAST, continue the + authentication without it. This is + equivalent to not setting this option at all. + + + demand to use FAST. The + authentication fails if the server does not + require fast. + + + Default: try + + + NOTE: SSSD supports FAST only with + MIT Kerberos version 1.8 and later. If SSSD is used + with an older version of MIT Kerberos, using this + option is a configuration error. + + + + + ipa_hbac_refresh (integer) diff --git a/src/man/sssd-krb5.5.xml b/src/man/sssd-krb5.5.xml index 5619e9b7ecb77ca3727cdea96a281efba8750fc9..eda37eae5a40023d13763641ca6bf19bc10c142b 100644 --- a/src/man/sssd-krb5.5.xml +++ b/src/man/sssd-krb5.5.xml @@ -502,7 +502,7 @@ - Default: false (AD provide: true) + Default: false (AD provider: true) -- 1.8.5.3