- dtucker@cvs.openbsd.org 2004/03/08 10:18:57

     [sshd_config.5]
     Document KerberosGetAFSToken;  ok markus@

diff --git a/ChangeLog b/ChangeLog
index 0907dc553dda892f9ce571383c547ad5e66bef6f..e80159f976d380252def91caf442272e242c15da 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -27,6 +27,9 @@
      [ssh-keyscan.c]
      explicitly initialise remote_major and remote_minor.
      from cjwatson AT debian.org; ok markus@
      [ssh-keyscan.c]
      explicitly initialise remote_major and remote_minor.
      from cjwatson AT debian.org; ok markus@

+   - dtucker@cvs.openbsd.org 2004/03/08 10:18:57
+     [sshd_config.5]
+     Document KerberosGetAFSToken;  ok markus@

 
 20040307
  - (tim) [regress/login-timeout.sh] fix building outside of source tree.
 
 20040307
  - (tim) [regress/login-timeout.sh] fix building outside of source tree.

diff --git a/sshd_config.5 b/sshd_config.5
index 41228248cb6949135d911856bcac515646518197..a8c8657756039b433cc70c8b5f8f7b2bc35e7824 100644 (file)
--- a/sshd_config.5
+++ b/sshd_config.5
@@ -34,7 +34,7 @@
 .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
 .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"

-.\" $OpenBSD: sshd_config.5,v 1.28 2004/02/17 19:35:21 jmc Exp $
+.\" $OpenBSD: sshd_config.5,v 1.29 2004/03/08 10:18:57 dtucker Exp $

 .Dd September 25, 1999
 .Dt SSHD_CONFIG 5
 .Os
 .Dd September 25, 1999
 .Dt SSHD_CONFIG 5
 .Os


@@ -300,6 +300,11 @@ To use this option, the server needs a
 Kerberos servtab which allows the verification of the KDC's identity.
 Default is
 .Dq no .
 Kerberos servtab which allows the verification of the KDC's identity.
 Default is
 .Dq no .

+.It Cm KerberosGetAFSToken
+If AFS is active and the user has a Kerberos 5 TGT, attempt to aquire
+an AFS token before accessing the user's home directory.
+Default is
+.Dq no .

 .It Cm KerberosOrLocalPasswd
 If set then if password authentication through Kerberos fails then
 the password will be validated via any additional local mechanism
 .It Cm KerberosOrLocalPasswd
 If set then if password authentication through Kerberos fails then
 the password will be validated via any additional local mechanism