Lines Matching +full:per +full:- +full:string

1 .\" Copyright (c) 2003 - 2004 Kungliga Tekniska Högskolan
42 .Bk -words
44 .Fl Fl config-file= Ns Ar file
47 .Op Fl p | Fl Fl no-require-preauth
48 .Op Fl Fl max-request= Ns Ar size
49 .Op Fl H | Fl Fl enable-http
50 .Op Fl Fl no-524
52 .Op Fl Fl kerberos4-cross-realm
53 .Oo Fl r Ar string \*(Ba Xo
54 .Fl Fl v4-realm= Ns Ar string
62 .Op Fl Fl disable-des
70 or from a default compiled-in value.
73 .Bl -tag -width Ds
74 .It Fl c Ar file , Fl Fl config-file= Ns Ar file
78 .It Fl p , Fl Fl no-require-preauth
79 Turn off the requirement for pre-authentication in the initial AS-REQ
81 The use of pre-authentication makes it more difficult to do offline
84 that don't support pre-authentication.
85 Since the version 4 protocol doesn't support any pre-authentication,
87 pre-authentication.
88 The default is to require pre-authentication.
89 Adding the require-preauth per principal is a more flexible way of
91 .It Fl Fl max-request= Ns Ar size
94 .It Fl H , Fl Fl enable-http
96 .It Fl Fl no-524
100 .It Fl Fl kerberos4-cross-realm
104 .It Fl r Ar string , Fl Fl v4-realm= Ns Ar string
117 white-space separated list of services or port numbers.
126 .It Fl Fl disable-des
145 All the command-line options can preferably be added in the
147 The only difference is the pre-authentication flag, which has to be
150 .Dl require-preauth = no
153 .Fl Fl require-preauth=no ) .
156 command-line equivalents:
157 .Bl -tag -width "xxx" -offset indent
158 .It Li enable-digest = Va boolean
161 .It Li check-ticket-addresses = Va boolean
164 .It Li allow-null-ticket-addresses = Va boolean
166 This option is only relevant when check-ticket-addresses is TRUE.
167 .It Li allow-anonymous = Va boolean
169 .It Li max-kdc-datagram-reply-length = Va number
172 .It Li transited-policy = Li always-check \*(Ba \
173 Li allow-per-principal | Li always-honour-request
175 .Li disable-transited-check
177 .Bl -tag -width "xxx" -offset indent
178 .It Li always-check
180 .It Li allow-per-principal
182 .Li always-check .
185 .It Li always-honour-request
187 In a future release, it will be possible to force a check per
191 Encode AS-Rep as TGS-Rep to be bug-compatible with old DCE code.
206 .Bd -literal -offset indent
208 	require-preauth = no
209 	v4-realm = FOO.SE
222 .Bd -literal -offset indent
223 kdc --addresses=0.0.0.0 --ports="88/tcp"