Continued changes to facilitate the setup of an ATS.

This commit is contained in:
Juan Carlos Luciani
2006-11-08 20:19:01 +00:00
parent 5b8f57d9c0
commit a999490245
25 changed files with 485 additions and 42 deletions

View File

@@ -207,8 +207,8 @@ Note the following about the sample auth.policy file:
- The authentication mechanism entries are: mechanism and mechanism_info. The mechanism
entry specifies the name of the authentication mechanism. The mechanism_info specifies
some mechanism specific information. Both authentication mechanism entries must be
specified for an auth_source entry.
some mechanism specific information, the need for this entry is dependent on the
configuration requirements of the specified mechanism.
- The name of the Krb5 Authentication mechanism is "Krb5Authenticate". This mechanism
defaults the service principal name to host/hostname@KERBEROS_REALM. You can use a
@@ -238,7 +238,7 @@ Note the following about the sample authtoken.settings file:
- The TokenLifetime setting specifies the number of seconds for which a token is good
for after being issued. The default value for this setting is 3600 seconds. Note that
a larger value reduces overhead, but it also gives more time for an intruder to
utilize the token if it becomes compromized.
utilize the token if it becomes compromised.
- The LifetimeShorter setting specifies the number of seconds that should be substracted
from the TokenLifetime when calculating the number of seconds that clients are told