Document dns_lookup_realm relation

ticket: 9134
tags: pullup
target_version: 1.21-next

diff --git a/doc/admin/conf_files/krb5_conf.rst b/doc/admin/conf_files/krb5_conf.rst
index 2a45b1eaf4fe910c0456f1d877aeb2fe9f876d21..315c2ff4245e0e2e9c68b41270110ccabab479e0 100644 (file)
--- a/doc/admin/conf_files/krb5_conf.rst
+++ b/doc/admin/conf_files/krb5_conf.rst
@@ -225,6 +225,12 @@ The libdefaults section may contain any of the following relations:
     data), and anything the fake KDC sends will not be trusted without
     verification using some secret that it won't know.
 
+**dns_lookup_realm**
+    Indicate whether DNS TXT records should be used to map hostnames
+    to realm names for hostnames not listed in the [domain_realm]
+    section, and to determine the default realm if **default_realm**
+    is not set.  The default value is false.
+
 **dns_uri_lookup**
     Indicate whether DNS URI records should be used to locate the KDCs
     and other servers for a realm, if they are not listed in the