svn rev #25002: trunk/doc/rst_source/krb_admins/conf_files/

[ghudson@MIT.EDU]

http://src.mit.edu/fisheye/changelog/krb5/?cs=25002
Commit By: ghudson
Log Message:
Document preauth krb5.conf options in rst docs.


Changed Files:
U   trunk/doc/rst_source/krb_admins/conf_files/krb5_conf.rst
Modified: trunk/doc/rst_source/krb_admins/conf_files/krb5_conf.rst
===================================================================
--- trunk/doc/rst_source/krb_admins/conf_files/krb5_conf.rst	2011-06-29 17:03:16 UTC (rev 25001)
+++ trunk/doc/rst_source/krb_admins/conf_files/krb5_conf.rst	2011-06-29 17:03:19 UTC (rev 25002)
@@ -420,6 +420,7 @@
 
     * pwqual interface
     * kadm5_hook interface
+    * clpreauth and kdcpreauth interfaces
 
 Tags in the **[plugins]** section can be used to register dynamic plugin modules and to turn modules on and off. Not every krb5 pluggable interface uses the [plugins] section; the ones that do are documented here.
 
@@ -455,6 +456,16 @@
 
 The kadm5_hook interface provides plugins with information on principal creation, modification, password changes and deletion. This interface can be used to write a plugin to synchronize MIT Kerberos with another database such as Active Directory. No plugins are built in for this interface.
 
+clpreauth and kdcpreauth interfaces
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+The clpreauth and kdcpreauth interfaces allow plugin modules to provide client and KDC preauthentication mechanisms.  The following built-in modules exist for these interfaces:
+
+pkinit
+    This module implements the PKINIT preauthentication mechanism.
+encrypted_challenge
+    This module implements the encrypted challenge FAST factor.
+
 PKINIT options
 -----------------