From: Greg Hudson <ghudson@mit.edu>
Date: Mon, 5 Aug 2024 21:37:06 +0000 (-0400)
Subject: Document dns_lookup_realm relation
X-Git-Tag: krb5-1.22-beta1~81
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F1365%2Fhead;p=thirdparty%2Fkrb5.git

Document dns_lookup_realm relation

ticket: 9134
tags: pullup
target_version: 1.21-next
---

diff --git a/doc/admin/conf_files/krb5_conf.rst b/doc/admin/conf_files/krb5_conf.rst
index 2a45b1eaf4..315c2ff424 100644
--- a/doc/admin/conf_files/krb5_conf.rst
+++ b/doc/admin/conf_files/krb5_conf.rst
@@ -225,6 +225,12 @@ The libdefaults section may contain any of the following relations:
     data), and anything the fake KDC sends will not be trusted without
     verification using some secret that it won't know.
 
+**dns_lookup_realm**
+    Indicate whether DNS TXT records should be used to map hostnames
+    to realm names for hostnames not listed in the [domain_realm]
+    section, and to determine the default realm if **default_realm**
+    is not set.  The default value is false.
+
 **dns_uri_lookup**
     Indicate whether DNS URI records should be used to locate the KDCs
     and other servers for a realm, if they are not listed in the