diff options
author | Andreas Schneider <asn@samba.org> | 2019-10-31 17:10:59 +0100 |
---|---|---|
committer | Andreas Schneider <asn@cryptomilk.org> | 2019-10-31 18:08:29 +0000 |
commit | 0de9dad9ebc88ab044f4b946ef44f63ae2281649 (patch) | |
tree | ae921517d519e7430d1d8dbbf9686655fd8fb251 /docs-xml | |
parent | c714c996017b4167e9a7424e1aecd4437deeed22 (diff) | |
download | samba-0de9dad9ebc88ab044f4b946ef44f63ae2281649.tar.gz |
docs-xml: Improve krb5_ccache_type documentation
Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
Diffstat (limited to 'docs-xml')
-rw-r--r-- | docs-xml/manpages/pam_winbind.conf.5.xml | 8 |
1 files changed, 6 insertions, 2 deletions
diff --git a/docs-xml/manpages/pam_winbind.conf.5.xml b/docs-xml/manpages/pam_winbind.conf.5.xml index 1c48f1bc428..918450c4643 100644 --- a/docs-xml/manpages/pam_winbind.conf.5.xml +++ b/docs-xml/manpages/pam_winbind.conf.5.xml @@ -121,11 +121,15 @@ library). In case of FILE a credential cache in the form of /tmp/krb5cc_UID will be created - in case of DIR you NEED to specify a directory. UID is replaced with the numeric - user id.</para> + user id. The UID directory is being created. The path up to + the directory should already exist. Check the details of the + Kerberos implmentation.</para> <para>When using the KEYRING type, the supported mechanism is <quote>KEYRING:persistent:UID</quote>, which uses the Linux - kernel keyring to store credentials on a per-UID basis.</para> + kernel keyring to store credentials on a per-UID basis. + The KEYRING has its limitations. As it is secure kernel memory, + for example bulk sorage of credentils is for not possible.</para> <para>When using th KCM type, the supported mechanism is <quote>KCM:UID</quote>, which uses a Kerberos credential |