svn rev #24991: trunk/ doc/ src/config-files/

[ghudson@MIT.EDU]

http://src.mit.edu/fisheye/changelog/krb5/?cs=24991
Commit By: ghudson
Log Message:
Document built-in modules for clpreauth/kdcpreauth.


Changed Files:
U   trunk/doc/admin.texinfo
U   trunk/src/config-files/krb5.conf.M
Modified: trunk/doc/admin.texinfo
===================================================================
--- trunk/doc/admin.texinfo	2011-06-24 20:12:28 UTC (rev 24990)
+++ trunk/doc/admin.texinfo	2011-06-26 14:28:26 UTC (rev 24991)
@@ -1128,8 +1128,7 @@
 @menu
 * pwqual interface::            
 * kadm5_hook interface::        
-* clpreauth interface::        
-* kdcpreauth interface::        
+* clpreauth and kdcpreauth interfaces::        
 @end menu
 
 Tags in the [plugins] section can be used to register dynamic plugin
@@ -1185,7 +1184,7 @@
 Checks against components of the principal name
 @end table
 
- at node kadm5_hook interface, clpreauth interface, pwqual interface, plugins
+ at node kadm5_hook interface, clpreauth and kdcpreauth interfaces, pwqual interface, plugins
 @subsubsection kadm5_hook interface
 The kadm5_hook interface provides plugins with information on
 principal creation, modification, password changes and deletion. This
@@ -1193,19 +1192,20 @@
 with another database such as Active Directory. No plugins are built
 in for this interface.
 
- at node clpreauth interface, kdcpreauth interface, kadm5_hook interface, plugins
+ at node clpreauth and kdcpreauth interfaces, , kadm5_hook interface, plugins
 @subsubsection clpreauth interface
 
-The clpreauth interface allows plugin modules to provide client
-preauthentication mechanisms.  There are no built-in modules for this
-interface.
+The clpreauth and kdcpreauth interfaces allows plugin modules to provide
+client and KDC preauthentication mechanisms.  The following built-in
+modules exist:
 
- at node kdcpreauth interface, , clpreauth interface, plugins
- at subsubsection kdcpreauth interface
+ at table @b
+ at itemx pkinit
+This module implements the PKINIT preauthentication mechanism.
 
-The kdcpreauth interface allows plugin modules to provide KDC
-preauthentication mechanisms.  There are no built-in modules for this
-interface.
+ at itemx encrypted_challenge
+This module implements the encrypted challenge FAST factor.
+ at end table
 
 @node pkinit client options, Sample krb5.conf File, plugins, krb5.conf
 @subsection pkinit options

Modified: trunk/src/config-files/krb5.conf.M
===================================================================
--- trunk/src/config-files/krb5.conf.M	2011-06-24 20:12:28 UTC (rev 24990)
+++ trunk/src/config-files/krb5.conf.M	2011-06-26 14:28:26 UTC (rev 24991)
@@ -780,17 +780,17 @@
 with another database such as Active Directory. No plugins are built
 in for this interface.
 
-.SS clpreauth interface
+.SS clpreauth and kdcpreauth interfaces
 
-The clpreauth interface allows plugin modules to provide client
-preauthentication mechanisms.  There are no built-in modules for this
-interface.
+The clpreauth and kdcpreauth interfaces allows plugin modules to
+provide client and KDC preauthentication mechanisms.  The following
+built-in modules exist for these interfaces:
 
-.SS kdcpreauth interface
+.IP pkinit
+This module implements the PKINIT preauthentication mechanism.
 
-The kdcpreauth interface allows plugin modules to provide KDC
-preauthentication mechanisms.  There are no built-in modules for this
-interface.
+.IP encrypted_challenge
+This module implements the encrypted challenge FAST factor.
 
 .SH FILES 
 /etc/krb5.conf