* admin.texinfo (realms (krb5.conf)): Add description of master_kdc tag.

(Sample krb5.conf File): Add it to the example.

ticket: 1692
tags: pullup

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15737 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/doc/ChangeLog b/doc/ChangeLog
index b71b54a141c944689c7becd0a7a0ddf59345d8c7..ffe9724f7cf21acf982de7ee95bbdbee1390bb28 100644 (file)
--- a/doc/ChangeLog
+++ b/doc/ChangeLog
@@ -1,3 +1,9 @@
+2003-07-25  Ken Raeburn  <raeburn@mit.edu>
+
+       * admin.texinfo (realms (krb5.conf)): Add description of
+       master_kdc tag.
+       (Sample krb5.conf File): Add it to the example.
+
 2003-07-24  Sam Hartman  <hartmans@mit.edu>
 
        * admin.texinfo (realms (kdc.conf)): Remove references to kdc_supported_enctypes

diff --git a/doc/admin.texinfo b/doc/admin.texinfo
index 0706aa51df736c0769ecb3403580304a0872efe6..ec500025fe3220183cbc781fd1c72c2e6584d05f 100644 (file)
--- a/doc/admin.texinfo
+++ b/doc/admin.texinfo
@@ -708,6 +708,15 @@ this tag must be given a value in each realm subsection in the
 configuration file, or there must be DNS SRV records specifying the
 KDCs (see @ref{Using DNS}).
 
+@itemx master_kdc
+Identifies the master KDC(s).  Currently, this tag is used in only one
+case: If an attempt to get credentials fails because of an invalid
+password, the client software will attempt to contact the master KDC,
+in case the user's password has just been changed, and the updated
+database has not been propagated to the slave servers yet.  (We don't
+currently check whether the KDC from which the initial response came
+is on the master KDC list.  That may be fixed in the future.)
+
 @itemx admin_server
 Identifies the host where the administration server is running.
 Typically, this is the master Kerberos server.  This tag must be given
@@ -1037,6 +1046,7 @@ Here is an example of a generic @code{krb5.conf} file:
         kdc = @value{KDCSLAVE1}.@value{PRIMARYDOMAIN}
         kdc = @value{KDCSLAVE2}.@value{PRIMARYDOMAIN}:750
         admin_server = @value{KDCSERVER}.@value{PRIMARYDOMAIN}
+        master_kdc = @value{KDCSERVER}.@value{PRIMARYDOMAIN}
         default_domain = @value{PRIMARYDOMAIN}
     @}
     @value{SECONDREALM} = @{