krb5 commit: Document "first introduced version" in conf files
Zhanna A Tsitkova
tsitkova at MIT.EDU
Mon Jan 7 15:01:37 EST 2013
https://github.com/krb5/krb5/commit/c49259fa1b15e5f1e46c240472c0ae75920871a9
commit c49259fa1b15e5f1e46c240472c0ae75920871a9
Author: Zhanna Tsitkov <tsitkova at mit.edu>
Date: Mon Jan 7 14:52:37 2013 -0500
Document "first introduced version" in conf files
For the config options that were introduced starting from release 1.9,
specify the release number.
doc/admin/conf_files/kdc_conf.rst | 9 +++++----
doc/admin/conf_files/krb5_conf.rst | 7 +++++--
2 files changed, 10 insertions(+), 6 deletions(-)
diff --git a/doc/admin/conf_files/kdc_conf.rst b/doc/admin/conf_files/kdc_conf.rst
index 7631431..c10e81e 100644
--- a/doc/admin/conf_files/kdc_conf.rst
+++ b/doc/admin/conf_files/kdc_conf.rst
@@ -210,7 +210,7 @@ For each realm, the following tags may be specified:
(Delta time string.) Specifies the amount of time to wait for a
full propagation to complete. This is optional in configuration
files, and is used by slave KDCs only. The default value is 5
- minutes (``5m``).
+ minutes (``5m``). First introduced in release 1.11.
**iprop_logfile**
(File name.) Specifies where the update log file for the realm
@@ -283,6 +283,7 @@ For each realm, the following tags may be specified:
purposes. If **allow_weak_crypto** in :ref:`libdefaults` is
false, or if des-cbc-crc is not a permitted enctype, then this
variable has no effect. Defaults to true.
+ First introduced in release 1.11.
**reject_bad_transit**
(Boolean value.) If set to true, the KDC will check the list of
@@ -311,7 +312,7 @@ For each realm, the following tags may be specified:
than the realm's ticket-granting service. This option allows
anonymous PKINIT to be enabled for use as FAST armor tickets
without allowing anonymous authentication to services. The
- default value is false.
+ default value is false. First introduced in release 1.9.
**supported_enctypes**
(List of *key*:*salt* strings.) Specifies the default key/salt
@@ -373,14 +374,14 @@ the subsection:
preauthentication. Setting this flag may improve performance.
(Principal entries which do not require preauthentication never
update the "Last successful authentication" field.). First
- introduced in version 1.9.
+ introduced in release 1.9.
**disable_lockout**
If set to ``true``, suppresses KDC updates to the "Last failed
authentication" and "Failed password attempts" fields of principal
entries requiring preauthentication. Setting this flag may
improve performance, but also disables account lockout. First
- introduced in version 1.9.
+ introduced in release 1.9.
**ldap_conns_per_server**
This LDAP-specific tag indicates the number of connections to be
diff --git a/doc/admin/conf_files/krb5_conf.rst b/doc/admin/conf_files/krb5_conf.rst
index 60a9d06..4c8f756 100644
--- a/doc/admin/conf_files/krb5_conf.rst
+++ b/doc/admin/conf_files/krb5_conf.rst
@@ -137,12 +137,13 @@ The libdefaults section may contain any of the following relations:
**default_ccache_name**
This relation specifies the name of the default credential cache.
The default is |ccache|. This relation is subject to parameter
- expansion (see below).
+ expansion (see below). First introduced in release 1.11.
**default_client_keytab_name**
This relation specifies the name of the default keytab for
obtaining client credentials. The default is |ckeytab|. This
relation is subject to parameter expansion (see below).
+ First introduced in release 1.11.
**default_keytab_name**
This relation specifies the default keytab name to be used by
@@ -219,7 +220,7 @@ The libdefaults section may contain any of the following relations:
(if given). This option can improve the administrative
flexibility of server applications on multihomed hosts, but could
compromise the security of virtual hosting environments. The
- default value is false.
+ default value is false. First introduced in release 1.10.
**k5login_authoritative**
If this flag is true, principals must be listed in a local user's
@@ -635,6 +636,8 @@ modules and to turn modules on and off. Not every krb5 pluggable
interface uses the [plugins] section; the ones that do are documented
here.
+First introduced in release 1.9.
+
Each pluggable interface corresponds to a subsection of [plugins].
All subsections support the same tags:
More information about the cvs-krb5
mailing list