diff --git a/crypto/dist/heimdal/kdc/kdc.8 b/crypto/dist/heimdal/kdc/kdc.8 index cc41ebf9fe8d..76f2e47cd8e8 100644 --- a/crypto/dist/heimdal/kdc/kdc.8 +++ b/crypto/dist/heimdal/kdc/kdc.8 @@ -1,5 +1,5 @@ .\" $Heimdal: kdc.8,v 1.17 2002/08/28 21:09:05 joda Exp $ -.\" $NetBSD: kdc.8,v 1.8 2002/09/12 13:19:01 joda Exp $ +.\" $NetBSD: kdc.8,v 1.9 2002/12/21 12:22:12 wiz Exp $ .\" .Dd August 22, 2002 .Dt KDC 8 @@ -48,13 +48,13 @@ This is the only value that can't be specified in the config file. .Fl p , .Fl -no-require-preauth .Xc -Turn off the requirement for pre-autentication in the initial AS-REQ +Turn off the requirement for pre-authentication in the initial AS-REQ for all principals. The use of pre-authentication makes it more difficult to do offline password attacks. You might want to turn it off if you have clients that doesn't do pre-authentication. Since the version 4 protocol doesn't support any pre-authentication, so serving version 4 clients is just about the same as not requiring -pre-athentication. The default is to require +pre-authentication. The default is to require pre-authentication. Adding the require-preauth per principal is a more flexible way of handling this. .It Xo @@ -86,7 +86,7 @@ requests. The database can contain any number of realms, but since the version 4 protocol doesn't contain a realm for the server, it must be explicitly specified. The default is whatever is returned by .Fn krb_get_lrealm . -This option is only availabe if the KDC has been compiled with version +This option is only available if the KDC has been compiled with version 4 support. .It Xo .Fl P Ar string ,