Print this page
12743 man page spelling mistakes
*** 212,228 ****
dns_lookup_kdc
Indicates whether DNS SRV records need to be used to locate the
KDCs and the other servers for a realm, if they have not already
been listed in the [realms] section. This option makes the machine
! vulnerable to a certain type of DoS attack if somone spoofs the DNS
! records and does a redirect to another server. This is, however, no
! worse than a DoS, since the bogus KDC is unable to decode anything
! sent (excepting the initial ticket request, which has no encrypted
! data). Also, anything the fake KDC sends out isl not trusted
! without verification (the local machine is unaware of the secret
! key to be used). If dns_lookup_kdc is not specified but
dns_fallback is, then that value is used instead. In either case,
values (if present) in the [realms] section override DNS.
dns_lookup_kdc is enabled by default.
--- 212,228 ----
dns_lookup_kdc
Indicates whether DNS SRV records need to be used to locate the
KDCs and the other servers for a realm, if they have not already
been listed in the [realms] section. This option makes the machine
! vulnerable to a certain type of DoS attack if someone spoofs the
! DNS records and does a redirect to another server. This is,
! however, no worse than a DoS, since the bogus KDC is unable to
! decode anything sent (excepting the initial ticket request, which
! has no encrypted data). Also, anything the fake KDC sends out isl
! not trusted without verification (the local machine is unaware of
! the secret key to be used). If dns_lookup_kdc is not specified but
dns_fallback is, then that value is used instead. In either case,
values (if present) in the [realms] section override DNS.
dns_lookup_kdc is enabled by default.
*** 1315,1320 ****
The max_life and max_renewable_life options are obsolete and is removed
in a future release of the Solaris operating system.
! November 26, 2017 KRB5.CONF(4)
--- 1315,1320 ----
The max_life and max_renewable_life options are obsolete and is removed
in a future release of the Solaris operating system.
! May 16, 2020 KRB5.CONF(4)