diff options
| author | Hans Insulander <hin@cvs.openbsd.org> | 2001-05-14 14:40:38 +0000 |
|---|---|---|
| committer | Hans Insulander <hin@cvs.openbsd.org> | 2001-05-14 14:40:38 +0000 |
| commit | f1c085feef7e471c16c6fd0b03613a31744e2eda (patch) | |
| tree | cfefb33b0d4daa630a3a04a1f98a66c06291d621 /etc/kerberosIV/README | |
| parent | 1af7850799ee1112bdfb09ac2f7a0018d47e5210 (diff) | |
Nitpicking
Diffstat (limited to 'etc/kerberosIV/README')
| -rw-r--r-- | etc/kerberosIV/README | 14 |
1 files changed, 7 insertions, 7 deletions
diff --git a/etc/kerberosIV/README b/etc/kerberosIV/README index d949fe04077..053c75fb06d 100644 --- a/etc/kerberosIV/README +++ b/etc/kerberosIV/README @@ -1,12 +1,12 @@ # from @(#)README 8.1 (Berkeley) 6/9/93 -# $OpenBSD: README,v 1.4 1998/01/21 00:29:18 art Exp $ +# $OpenBSD: README,v 1.5 2001/05/14 14:40:37 hin Exp $ Notes about the contents of the /etc/kerberosIV directory: -(please check /usr/share/info for more information about kerberos) +(Please check the kth-krb infopage for more information about KerberosIV) The file master_key contains a copy of the master key under which the -entire Kerberos database is encrypted. Disclosing this key would be bad +entire KerberosIV database is encrypted. Disclosing this key would be bad news. The reason it is stored in the filesystem is because the following programs need to inspect or modify the kereros database, and so the key must be available for them, (or else it would have to be typed in by @@ -19,17 +19,17 @@ The srvtab file contains the encryption keys for each service on the local host. Any host offering network services would have a key here, although many such files can be used. -The principal.* files comprise the Kerberos database itself, and contain +The principal.* files comprise the KerberosIV database itself, and contain keys for all principles, and should not be world-readable. The krb.conf file contains the configuration for this machine: 1) which realm I'm in - if this line begins with '#', kerberos is disabled system-wide. + if this line begins with '#', KerberosIV is disabled system-wide. 2) which servers I should talk to for _this_ realm 3) which servers I should talk to for the following realms. -The krb.realms file contains the name of Kerberos servers for +The krb.realms file contains the name of KerberosIV servers for various (sub)domains. -Kerberos log information it placed in /var/log/kerberos.log +KerberosIV log information it placed in /var/log/kerberos.log (see /etc/rc to change it) |