Print this page
12743 man page spelling mistakes
@@ -212,17 +212,17 @@
dns_lookup_kdc
Indicates whether DNS SRV records need to be used to locate the
KDCs and the other servers for a realm, if they have not already
been listed in the [realms] section. This option makes the machine
- vulnerable to a certain type of DoS attack if somone spoofs the DNS
- records and does a redirect to another server. This is, however, no
- worse than a DoS, since the bogus KDC is unable to decode anything
- sent (excepting the initial ticket request, which has no encrypted
- data). Also, anything the fake KDC sends out isl not trusted
- without verification (the local machine is unaware of the secret
- key to be used). If dns_lookup_kdc is not specified but
+ vulnerable to a certain type of DoS attack if someone spoofs the
+ DNS records and does a redirect to another server. This is,
+ however, no worse than a DoS, since the bogus KDC is unable to
+ decode anything sent (excepting the initial ticket request, which
+ has no encrypted data). Also, anything the fake KDC sends out isl
+ not trusted without verification (the local machine is unaware of
+ the secret key to be used). If dns_lookup_kdc is not specified but
dns_fallback is, then that value is used instead. In either case,
values (if present) in the [realms] section override DNS.
dns_lookup_kdc is enabled by default.
@@ -1315,6 +1315,6 @@
The max_life and max_renewable_life options are obsolete and is removed
in a future release of the Solaris operating system.
- November 26, 2017 KRB5.CONF(4)
+ May 16, 2020 KRB5.CONF(4)