host's domain itself, 1 means to also try the domain's immediate
parent, and so forth. The library's usual mechanism for locating
Kerberos realms is used to determine whether a domain is a valid
- realm--which may involve consulting DNS if **dns_lookup_kdc** is
+ realm---which may involve consulting DNS if **dns_lookup_kdc** is
set. The default is not to search domain components.
**renew_lifetime**
This accommodates a use case where a large number of unkeyed shared
desktop workstations need to allow users to log in using Kerberos.
The security risks from this practice are mitigated by the absence of
-valuable state on the shared workstations -- any valuable resources
+valuable state on the shared workstations---any valuable resources
that the users would access reside on networked servers.
Your password is the only way Kerberos has of verifying your identity.
If someone finds out your password, that person can masquerade as
-you--send email that comes from you, read, edit, or delete your files,
-or log into other hosts as you--and no one will be able to tell the
+you---send email that comes from you, read, edit, or delete your files,
+or log into other hosts as you---and no one will be able to tell the
difference. For this reason, it is important that you choose a good
password, and keep it secret. If you need to give access to your
account to someone else, you can do so through Kerberos (see