Continued changes to facilitate the setup of an ATS.
This commit is contained in:
@@ -207,8 +207,8 @@ Note the following about the sample auth.policy file:
|
||||
|
||||
- The authentication mechanism entries are: mechanism and mechanism_info. The mechanism
|
||||
entry specifies the name of the authentication mechanism. The mechanism_info specifies
|
||||
some mechanism specific information. Both authentication mechanism entries must be
|
||||
specified for an auth_source entry.
|
||||
some mechanism specific information, the need for this entry is dependent on the
|
||||
configuration requirements of the specified mechanism.
|
||||
|
||||
- The name of the Krb5 Authentication mechanism is "Krb5Authenticate". This mechanism
|
||||
defaults the service principal name to host/hostname@KERBEROS_REALM. You can use a
|
||||
@@ -238,7 +238,7 @@ Note the following about the sample authtoken.settings file:
|
||||
- The TokenLifetime setting specifies the number of seconds for which a token is good
|
||||
for after being issued. The default value for this setting is 3600 seconds. Note that
|
||||
a larger value reduces overhead, but it also gives more time for an intruder to
|
||||
utilize the token if it becomes compromized.
|
||||
utilize the token if it becomes compromised.
|
||||
|
||||
- The LifetimeShorter setting specifies the number of seconds that should be substracted
|
||||
from the TokenLifetime when calculating the number of seconds that clients are told
|
||||
|
||||
Reference in New Issue
Block a user