summaryrefslogtreecommitdiff
path: root/docs-xml
diff options
context:
space:
mode:
authorAndreas Schneider <asn@samba.org>2019-10-31 17:10:59 +0100
committerAndreas Schneider <asn@cryptomilk.org>2019-10-31 18:08:29 +0000
commit0de9dad9ebc88ab044f4b946ef44f63ae2281649 (patch)
treeae921517d519e7430d1d8dbbf9686655fd8fb251 /docs-xml
parentc714c996017b4167e9a7424e1aecd4437deeed22 (diff)
downloadsamba-0de9dad9ebc88ab044f4b946ef44f63ae2281649.tar.gz
docs-xml: Improve krb5_ccache_type documentation
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
Diffstat (limited to 'docs-xml')
-rw-r--r--docs-xml/manpages/pam_winbind.conf.5.xml8
1 files changed, 6 insertions, 2 deletions
diff --git a/docs-xml/manpages/pam_winbind.conf.5.xml b/docs-xml/manpages/pam_winbind.conf.5.xml
index 1c48f1bc428..918450c4643 100644
--- a/docs-xml/manpages/pam_winbind.conf.5.xml
+++ b/docs-xml/manpages/pam_winbind.conf.5.xml
@@ -121,11 +121,15 @@
library). In case of FILE a credential cache in the form of
/tmp/krb5cc_UID will be created - in case of DIR you NEED
to specify a directory. UID is replaced with the numeric
- user id.</para>
+ user id. The UID directory is being created. The path up to
+ the directory should already exist. Check the details of the
+ Kerberos implmentation.</para>
<para>When using the KEYRING type, the supported mechanism is
<quote>KEYRING:persistent:UID</quote>, which uses the Linux
- kernel keyring to store credentials on a per-UID basis.</para>
+ kernel keyring to store credentials on a per-UID basis.
+ The KEYRING has its limitations. As it is secure kernel memory,
+ for example bulk sorage of credentils is for not possible.</para>
<para>When using th KCM type, the supported mechanism is
<quote>KCM:UID</quote>, which uses a Kerberos credential