|
Last change
on this file was 988, checked in by Silvan Scherrer, 9 years ago |
|
Samba Server: update vendor to version 4.4.3
|
|
File size:
1.3 KB
|
| Line | |
|---|
| 1 | <samba:parameter name="kerberos method"
|
|---|
| 2 | context="G"
|
|---|
| 3 | type="enum"
|
|---|
| 4 | enumlist="enum_kerberos_method"
|
|---|
| 5 | xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
|
|---|
| 6 | <description>
|
|---|
| 7 | <para>
|
|---|
| 8 | Controls how kerberos tickets are verified.
|
|---|
| 9 | </para>
|
|---|
| 10 |
|
|---|
| 11 | <para>Valid options are:</para>
|
|---|
| 12 | <itemizedlist>
|
|---|
| 13 | <listitem><para>secrets only - use only the secrets.tdb for
|
|---|
| 14 | ticket verification (default)</para></listitem>
|
|---|
| 15 |
|
|---|
| 16 | <listitem><para>system keytab - use only the system keytab
|
|---|
| 17 | for ticket verification</para></listitem>
|
|---|
| 18 |
|
|---|
| 19 | <listitem><para>dedicated keytab - use a dedicated keytab
|
|---|
| 20 | for ticket verification</para></listitem>
|
|---|
| 21 |
|
|---|
| 22 | <listitem><para>secrets and keytab - use the secrets.tdb
|
|---|
| 23 | first, then the system keytab</para></listitem>
|
|---|
| 24 | </itemizedlist>
|
|---|
| 25 |
|
|---|
| 26 | <para>
|
|---|
| 27 | The major difference between "system keytab" and "dedicated
|
|---|
| 28 | keytab" is that the latter method relies on kerberos to find the
|
|---|
| 29 | correct keytab entry instead of filtering based on expected
|
|---|
| 30 | principals.
|
|---|
| 31 | </para>
|
|---|
| 32 |
|
|---|
| 33 | <para>
|
|---|
| 34 | When the kerberos method is in "dedicated keytab" mode,
|
|---|
| 35 | <smbconfoption name="dedicated keytab file"/> must be set to
|
|---|
| 36 | specify the location of the keytab file.
|
|---|
| 37 | </para>
|
|---|
| 38 | </description>
|
|---|
| 39 | <related>dedicated keytab file</related>
|
|---|
| 40 | <value type="default">default</value>
|
|---|
| 41 | </samba:parameter>
|
|---|
Note:
See
TracBrowser
for help on using the repository browser.
