.\" Man page generated from reStructuredText.
.
-.TH "K5IDENTITY" "5" " " "1.17" "MIT Kerberos"
+.TH "K5IDENTITY" "5" " " "1.18" "MIT Kerberos"
.SH NAME
k5identity \- Kerberos V5 client principal selection rules
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2018, MIT
+1985-2019, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "K5LOGIN" "5" " " "1.17" "MIT Kerberos"
+.TH "K5LOGIN" "5" " " "1.18" "MIT Kerberos"
.SH NAME
k5login \- Kerberos V5 acl file for host access
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2018, MIT
+1985-2019, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "K5SRVUTIL" "1" " " "1.17" "MIT Kerberos"
+.TH "K5SRVUTIL" "1" " " "1.18" "MIT Kerberos"
.SH NAME
k5srvutil \- host key table (keytab) manipulation utility
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2018, MIT
+1985-2019, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "KADM5.ACL" "5" " " "1.17" "MIT Kerberos"
+.TH "KADM5.ACL" "5" " " "1.18" "MIT Kerberos"
.SH NAME
kadm5.acl \- Kerberos ACL file
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2018, MIT
+1985-2019, MIT
.\" Generated by docutils manpage writer.
.
(List of \fIkey\fP:\fIsalt\fP strings.) Specifies the default key/salt
combinations of principals for this realm. Any principals created
through kadmin(1) will have keys of these types. The
-default value for this tag is \fBaes256\-cts\-hmac\-sha1\-96:normal aes128\-cts\-hmac\-sha1\-96:normal des3\-cbc\-sha1:normal arcfour\-hmac\-md5:normal\fP\&. For lists of
+default value for this tag is \fBaes256\-cts\-hmac\-sha1\-96:normal aes128\-cts\-hmac\-sha1\-96:normal\fP\&. For lists of
possible values, see \fI\%Keysalt lists\fP\&.
.UNINDENT
.SS [dbdefaults]
.\" Man page generated from reStructuredText.
.
-.TH "KDESTROY" "1" " " "1.17" "MIT Kerberos"
+.TH "KDESTROY" "1" " " "1.18" "MIT Kerberos"
.SH NAME
kdestroy \- destroy Kerberos tickets
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2018, MIT
+1985-2019, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "KLIST" "1" " " "1.17" "MIT Kerberos"
+.TH "KLIST" "1" " " "1.18" "MIT Kerberos"
.SH NAME
klist \- list cached Kerberos tickets
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2018, MIT
+1985-2019, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "KPASSWD" "1" " " "1.17" "MIT Kerberos"
+.TH "KPASSWD" "1" " " "1.18" "MIT Kerberos"
.SH NAME
kpasswd \- change a user's Kerberos password
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2018, MIT
+1985-2019, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "KPROP" "8" " " "1.17" "MIT Kerberos"
+.TH "KPROP" "8" " " "1.18" "MIT Kerberos"
.SH NAME
kprop \- propagate a Kerberos V5 principal database to a replica server
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2018, MIT
+1985-2019, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "KPROPD" "8" " " "1.17" "MIT Kerberos"
+.TH "KPROPD" "8" " " "1.18" "MIT Kerberos"
.SH NAME
kpropd \- Kerberos V5 replica KDC update server
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2018, MIT
+1985-2019, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "KPROPLOG" "8" " " "1.17" "MIT Kerberos"
+.TH "KPROPLOG" "8" " " "1.18" "MIT Kerberos"
.SH NAME
kproplog \- display the contents of the Kerberos principal update log
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2018, MIT
+1985-2019, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "KRB5-CONFIG" "1" " " "1.17" "MIT Kerberos"
+.TH "KRB5-CONFIG" "1" " " "1.18" "MIT Kerberos"
.SH NAME
krb5-config \- tool for linking against MIT Kerberos libraries
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2018, MIT
+1985-2019, MIT
.\" Generated by docutils manpage writer.
.
If this flag is true, initial tickets will be proxiable by
default, if allowed by the KDC. The default value is false.
.TP
+\fBqualify_shortname\fP
+If this string is set, it determines the domain suffix for
+single\-component hostnames when DNS canonicalization is not used
+(either because \fBdns_canonicalize_hostname\fP is false or because
+forward canonicalization failed). The default value is the first
+search domain of the system\(aqs DNS configuration. To disable
+qualification of shortnames, set this relation to the empty string
+with \fBqualify_shortname = ""\fP\&. (New in release 1.18.)
+.TP
\fBrdns\fP
If this flag is true, reverse name lookup will be used in addition
to forward name lookup to canonicalizing hostnames for use in
.\" Man page generated from reStructuredText.
.
-.TH "KSU" "1" " " "1.17" "MIT Kerberos"
+.TH "KSU" "1" " " "1.18" "MIT Kerberos"
.SH NAME
ksu \- Kerberized super-user
.
[ \fB\-c\fP \fIsource_cache_name\fP ]
[ \fB\-k\fP ]
[ \fB\-r\fP time ]
-[ \fB\-pf\fP ]
+[ \fB\-p\fP | \fB\-P\fP]
+[ \fB\-f\fP | \fB\-F\fP]
[ \fB\-l\fP \fIlifetime\fP ]
[ \fB\-z | Z\fP ]
[ \fB\-q\fP ]
Ticket granting ticket options:
.INDENT 0.0
.TP
-\fB\-l\fP \fIlifetime\fP \fB\-r\fP \fItime\fP \fB\-pf\fP
+\fB\-l\fP \fIlifetime\fP \fB\-r\fP \fItime\fP \fB\-p\fP \fB\-P\fP \fB\-f\fP \fB\-F\fP
The ticket granting ticket options only apply to the case where
there are no appropriate tickets in the cache to authenticate the
source user. In this case if ksu is configured to prompt users
specifies that the \fBproxiable\fP option should be requested for
the ticket.
.TP
+\fB\-P\fP
+specifies that the \fBproxiable\fP option should not be requested
+for the ticket, even if the default configuration is to ask for
+proxiable tickets.
+.TP
\fB\-f\fP
option specifies that the \fBforwardable\fP option should be
requested for the ticket.
.TP
+\fB\-F\fP
+option specifies that the \fBforwardable\fP option should not be
+requested for the ticket, even if the default configuration is to
+ask for forwardable tickets.
+.TP
\fB\-e\fP \fIcommand\fP [\fIargs\fP ...]
ksu proceeds exactly the same as if it was invoked without the
\fB\-e\fP option, except instead of executing the target shell, ksu
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2018, MIT
+1985-2019, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "KSWITCH" "1" " " "1.17" "MIT Kerberos"
+.TH "KSWITCH" "1" " " "1.18" "MIT Kerberos"
.SH NAME
kswitch \- switch primary ticket cache
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2018, MIT
+1985-2019, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "SCLIENT" "1" " " "1.17" "MIT Kerberos"
+.TH "SCLIENT" "1" " " "1.18" "MIT Kerberos"
.SH NAME
sclient \- sample Kerberos version 5 client
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2018, MIT
+1985-2019, MIT
.\" Generated by docutils manpage writer.
.
.\" Man page generated from reStructuredText.
.
-.TH "SSERVER" "8" " " "1.17" "MIT Kerberos"
+.TH "SSERVER" "8" " " "1.18" "MIT Kerberos"
.SH NAME
sserver \- sample Kerberos version 5 server
.
.SH AUTHOR
MIT
.SH COPYRIGHT
-1985-2018, MIT
+1985-2019, MIT
.\" Generated by docutils manpage writer.
.