Print this page
12743 man page spelling mistakes

*** 212,228 **** dns_lookup_kdc Indicates whether DNS SRV records need to be used to locate the KDCs and the other servers for a realm, if they have not already been listed in the [realms] section. This option makes the machine ! vulnerable to a certain type of DoS attack if somone spoofs the DNS ! records and does a redirect to another server. This is, however, no ! worse than a DoS, since the bogus KDC is unable to decode anything ! sent (excepting the initial ticket request, which has no encrypted ! data). Also, anything the fake KDC sends out isl not trusted ! without verification (the local machine is unaware of the secret ! key to be used). If dns_lookup_kdc is not specified but dns_fallback is, then that value is used instead. In either case, values (if present) in the [realms] section override DNS. dns_lookup_kdc is enabled by default. --- 212,228 ---- dns_lookup_kdc Indicates whether DNS SRV records need to be used to locate the KDCs and the other servers for a realm, if they have not already been listed in the [realms] section. This option makes the machine ! vulnerable to a certain type of DoS attack if someone spoofs the ! DNS records and does a redirect to another server. This is, ! however, no worse than a DoS, since the bogus KDC is unable to ! decode anything sent (excepting the initial ticket request, which ! has no encrypted data). Also, anything the fake KDC sends out isl ! not trusted without verification (the local machine is unaware of ! the secret key to be used). If dns_lookup_kdc is not specified but dns_fallback is, then that value is used instead. In either case, values (if present) in the [realms] section override DNS. dns_lookup_kdc is enabled by default.
*** 1315,1320 **** The max_life and max_renewable_life options are obsolete and is removed in a future release of the Solaris operating system. ! November 26, 2017 KRB5.CONF(4) --- 1315,1320 ---- The max_life and max_renewable_life options are obsolete and is removed in a future release of the Solaris operating system. ! May 16, 2020 KRB5.CONF(4)