fix typo; from heimdal cvs

ok deraadt@

1 files changed, 14 insertions, 5 deletions

diff --git a/kerberosV/src/lib/gssapi/gssapi.3 b/kerberosV/src/lib/gssapi/gssapi.3
index 4ceca68470c..3b85a556799 100644
--- a/kerberosV/src/lib/gssapi/gssapi.3
+++ b/kerberosV/src/lib/gssapi/gssapi.3
@@ -29,7 +29,7 @@
 .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 
 .\" SUCH DAMAGE. 
 .\" 
-.\" $Id: gssapi.3,v 1.1 2003/05/11 02:15:40 hin Exp $
+.\" $KTH: gssapi.3,v 1.5.2.2 2003/04/30 09:56:26 lha Exp $
 .\"
 .Dd January 23, 2003
 .Dt GSSAPI 3
@@ -106,9 +106,18 @@ implementations when using
 .Fn gss_get_mic
 /
 .Fn gss_verify_mic .
+Its possible to modify the behavior of the generator of the MIC with
+the
+.Pa krb5.conf
+configuration file so that old clients/servers will still
+work.
+.Pp
+New clients/servers will try both the old and new MIC in Heimdal 0.6.
+In 0.7 it will check only if configured and the compatibility code
+will be removed in 0.8.
 .Pp
-Default is to use the broken GSS-API DES3 mic in Heimdal 0.6, this
-will change in 0.7 to use correct des3 mic.
+Heimdal 0.6 still generates by default the broken GSS-API DES3 mic,
+this will change in 0.7 to generate correct des3 mic.
 .Pp
 To turn on compatibility with older clients and servers, change the
 .Nm [gssapi]
@@ -117,7 +126,7 @@ in
 .Pa krb5.conf
 that contains a list of globbing expressions that will be matched
 against the server name.
-To turn off compatibility with older clients and servers use
+To turn off generation of the old (incompatible) mic of the MIC use
 .Nm [gssapi]
 .Ar correct_des3_mic .
 .Pp
@@ -126,7 +135,7 @@ If a match for a entry is in both
 .Ar correct_des3_mic
 and
 .Nm [gssapi]
-.Ar correct_des3_mic ,
+.Ar broken_des3_mic ,
 the later will override.
 .Pp
 This config option modifies behaviour for both clients and servers.