krb5 commit: Document /etc/gss/mech.d/*.conf
Greg Hudson
ghudson at MIT.EDU
Thu May 22 18:26:31 EDT 2014
https://github.com/krb5/krb5/commit/406f273e373014edc0ec31995dc82d6b7a5d73f8
commit 406f273e373014edc0ec31995dc82d6b7a5d73f8
Author: Günther Deschner <gdeschner at redhat.com>
Date: Mon Apr 7 12:10:34 2014 +0200
Document /etc/gss/mech.d/*.conf
[ghudson at mit.edu: editorial changes]
doc/admin/host_config.rst | 7 +++++--
doc/plugindev/gssapi.rst | 12 ++++++------
2 files changed, 11 insertions(+), 8 deletions(-)
diff --git a/doc/admin/host_config.rst b/doc/admin/host_config.rst
index 755437c..2ac12ad 100644
--- a/doc/admin/host_config.rst
+++ b/doc/admin/host_config.rst
@@ -85,8 +85,11 @@ locator plugin would be registered by placing its shared object in
GSSAPI mechanism modules
~~~~~~~~~~~~~~~~~~~~~~~~
-GSSAPI mechanism module are registered using the file
-``/etc/gss/mech``. Each line in this file has the form::
+GSSAPI mechanism modules are registered using the file
+``/etc/gss/mech`` or configuration files in the ``/etc/gss/mech.d/``
+directory. Only files with a ``.conf`` suffix will be read from the
+``/etc/gss/mech.d/`` directory. Each line in these files has the
+form::
oid pathname [options] <type>
diff --git a/doc/plugindev/gssapi.rst b/doc/plugindev/gssapi.rst
index bb5d6d1..34fc9e4 100644
--- a/doc/plugindev/gssapi.rst
+++ b/doc/plugindev/gssapi.rst
@@ -9,8 +9,8 @@ the set of built-in mechanisms.
A mechanism module is a Unix shared object or Windows DLL, built
separately from the krb5 tree. Modules are loaded according to the
-``/etc/gss/mech`` config file, as described in
-:ref:`gssapi_plugin_config`.
+``/etc/gss/mech`` or ``/etc/gss/mech.d/*.conf`` config files, as
+described in :ref:`gssapi_plugin_config`.
For the most part, a GSSAPI mechanism module exports the same
functions as would a GSSAPI implementation itself, with the same
@@ -45,10 +45,10 @@ with the following signature::
gss_OID_set gss_mech_interposer(gss_OID mech_type);
This function is invoked with the OID of the interposer mechanism as
-specified in ``/etc/gss/mech``, and returns a set of mechanism OIDs to
-be interposed. The returned OID set must have been created using the
-mechglue's gss_create_empty_oid_set and gss_add_oid_set_member
-functions.
+specified in ``/etc/gss/mech`` or in a ``/etc/gss/mech.d/*.conf``
+file, and returns a set of mechanism OIDs to be interposed. The
+returned OID set must have been created using the mechglue's
+gss_create_empty_oid_set and gss_add_oid_set_member functions.
An interposer module must use the prefix ``gssi_`` for the GSSAPI
functions it exports, instead of the prefix ``gss_``.
More information about the cvs-krb5
mailing list