krb5: Import MIT 1.21.3 - src - FreeBSD source tree

diff options


context:
space:
mode:

author	Cy Schubert <cy@FreeBSD.org>	2025-03-19 22:12:25 +0000
committer	Cy Schubert <cy@FreeBSD.org>	2025-03-19 22:12:25 +0000
commit	8f7d3ef26dec89a92ec0665de84a5936310a5574 (patch)
tree	9a465418bd4056bf0d369751320a414eaed29fa4 /doc/html/admin/admin_commands/kdb5_ldap_util.html
parent	1a79b20663ca26acc2998b90ea2ff2aefd8af5b1 (diff)

Diffstat (limited to 'doc/html/admin/admin_commands/kdb5_ldap_util.html')

-rw-r--r--

doc/html/admin/admin_commands/kdb5_ldap_util.html

375

1 files changed, 190 insertions, 185 deletions

diff --git a/doc/html/admin/admin_commands/kdb5_ldap_util.html b/doc/html/admin/admin_commands/kdb5_ldap_util.html
index fdead5e699a0..7b6321b5b8d9 100644
--- a/doc/html/admin/admin_commands/kdb5_ldap_util.html
+++ b/doc/html/admin/admin_commands/kdb5_ldap_util.html

@@ -1,35 +1,26 @@

-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"

- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

+<!DOCTYPE html>

-<html xmlns="http://www.w3.org/1999/xhtml">

+<html>

<head>

- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />

+ <meta charset="utf-8" />

+ <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="generator" content="Docutils 0.17.1: http://docutils.sourceforge.net/" />

<title>kdb5_ldap_util — MIT Kerberos Documentation</title>

- <link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />

- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />

- <link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />

- <script type="text/javascript">

- var DOCUMENTATION_OPTIONS = {

- URL_ROOT: '../../',

- VERSION: '1.21.2',

- COLLAPSE_INDEX: false,

- FILE_SUFFIX: '.html',

- HAS_SOURCE: true,

- SOURCELINK_SUFFIX: '.txt'

- };

- </script>

- <script type="text/javascript" src="../../_static/jquery.js"></script>

- <script type="text/javascript" src="../../_static/underscore.js"></script>

- <script type="text/javascript" src="../../_static/doctools.js"></script>

+ <link rel="stylesheet" type="text/css" href="../../_static/pygments.css" />

+ <link rel="stylesheet" type="text/css" href="../../_static/agogo.css" />

+ <link rel="stylesheet" type="text/css" href="../../_static/kerb.css" />

+ <script data-url_root="../../" id="documentation_options" src="../../_static/documentation_options.js"></script>

+ <script src="../../_static/jquery.js"></script>

+ <script src="../../_static/underscore.js"></script>

+ <script src="../../_static/doctools.js"></script>

- </head>

- <body>

+ </head><body>

@@ -61,46 +52,46 @@

- <div class="section" id="kdb5-ldap-util">

+ <section id="kdb5-ldap-util">

-<div class="section" id="synopsis">

+<section id="synopsis">

<h2>SYNOPSIS<a class="headerlink" href="#synopsis" title="Permalink to this headline">¶</a></h2>

kdb5_ldap_util

[-D user_dn [-w passwd]]

[-H ldapuri]

command

[command_options]

-</div>

-<div class="section" id="description">

+</section>

+<section id="description">

<h2>DESCRIPTION<a class="headerlink" href="#description" title="Permalink to this headline">¶</a></h2>

kdb5_ldap_util allows an administrator to manage realms, Kerberos

services and ticket policies.

-</div>

-<div class="section" id="command-line-options">

+</section>

+<section id="command-line-options">

<h2>COMMAND-LINE OPTIONS<a class="headerlink" href="#command-line-options" title="Permalink to this headline">¶</a></h2>

-<dl class="docutils" id="kdb5-ldap-util-options">

-<dt>-r realm</dt>

-<dd>Specifies the realm to be operated on.</dd>

-<dt>-D user_dn</dt>

-<dd>Specifies the Distinguished Name (DN) of the user who has

-sufficient rights to perform the operation on the LDAP server.</dd>

-<dt>-w passwd</dt>

-<dd>Specifies the password of user_dn. This option is not

-recommended.</dd>

-<dt>-H ldapuri</dt>

-<dd>Specifies the URI of the LDAP server.</dd>

+<dl class="simple" id="kdb5-ldap-util-options">

+<dt>-r realm</dt><dd>Specifies the realm to be operated on.

+</dd>

+<dt>-D user_dn</dt><dd>Specifies the Distinguished Name (DN) of the user who has

+sufficient rights to perform the operation on the LDAP server.

+</dd>

+<dt>-w passwd</dt><dd>Specifies the password of user_dn. This option is not

+recommended.

+</dd>

+<dt>-H ldapuri</dt><dd>Specifies the URI of the LDAP server.

+</dd>

</dl>

By default, kdb5_ldap_util operates on the default realm (as specified

in <a class="reference internal" href="../conf_files/krb5_conf.html#krb5-conf-5">krb5.conf</a>) and connects and authenticates to the LDAP

server in the same manner as :ref:kadmind(8)` would given the

parameters in <a class="reference internal" href="../conf_files/kdc_conf.html#dbdefaults">[dbdefaults]</a> in <a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5">kdc.conf</a>.

-</div>

-<div class="section" id="commands">

+</section>

+<section id="commands">

<h2>COMMANDS<a class="headerlink" href="#commands" title="Permalink to this headline">¶</a></h2>

-<div class="section" id="create">

+<section id="create">

<h3>create<a class="headerlink" href="#create" title="Permalink to this headline">¶</a></h3>

-<div>create

+<div>create

[-subtrees subtree_dn_list]

[-sscope search_scope]

[-containerref container_reference_dn]

@@ -111,56 +102,57 @@ parameters in <a class="reference internal" href="../conf_files/kdc_conf.html#db

[-s]

[-maxtktlife max_ticket_life]

[-maxrenewlife max_renewable_ticket_life]

-[ticket_flags]</div></blockquote>

+[ticket_flags]

+</div></blockquote>

Creates realm in directory. Options:

-<dl class="docutils">

-<dt>-subtrees subtree_dn_list</dt>

-<dd>Specifies the list of subtrees containing the principals of a

+<dl class="simple">

+<dt>-subtrees subtree_dn_list</dt><dd>Specifies the list of subtrees containing the principals of a

realm. The list contains the DNs of the subtree objects separated

-by colon (<code class="docutils literal">:</code>).</dd>

-<dt>-sscope search_scope</dt>

-<dd>Specifies the scope for searching the principals under the

+by colon (<code class="docutils literal notranslate">:</code>).

+</dd>

+<dt>-sscope search_scope</dt><dd>Specifies the scope for searching the principals under the

subtree. The possible values are 1 or one (one level), 2 or sub

-(subtrees).</dd>

-<dt>-containerref container_reference_dn</dt>

-<dd>Specifies the DN of the container object in which the principals

+(subtrees).

+</dd>

+<dt>-containerref container_reference_dn</dt><dd>Specifies the DN of the container object in which the principals

of a realm will be created. If the container reference is not

configured for a realm, the principals will be created in the

-realm container.</dd>

-<dt>-k mkeytype</dt>

-<dd>Specifies the key type of the master key in the database. The

+realm container.

+</dd>

+<dt>-k mkeytype</dt><dd>Specifies the key type of the master key in the database. The

default is given by the master_key_type variable in

-<a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5">kdc.conf</a>.</dd>

-<dt>-kv mkeyVNO</dt>

-<dd>Specifies the version number of the master key in the database;

-the default is 1. Note that 0 is not allowed.</dd>

-<dt>-M mkeyname</dt>

-<dd>Specifies the principal name for the master key in the database.

+<a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5">kdc.conf</a>.

+</dd>

+<dt>-kv mkeyVNO</dt><dd>Specifies the version number of the master key in the database;

+the default is 1. Note that 0 is not allowed.

+</dd>

+<dt>-M mkeyname</dt><dd>Specifies the principal name for the master key in the database.

If not specified, the name is determined by the

-master_key_name variable in <a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5">kdc.conf</a>.</dd>

-<dt>-m</dt>

-<dd>Specifies that the master database password should be read from

-the TTY rather than fetched from a file on the disk.</dd>

-<dt>-P password</dt>

-<dd>Specifies the master database password. This option is not

-recommended.</dd>

-<dt>-sf stashfilename</dt>

-<dd>Specifies the stash file of the master database password.</dd>

-<dt>-s</dt>

-<dd>Specifies that the stash file is to be created.</dd>

-<dt>-maxtktlife max_ticket_life</dt>

-<dd>(<a class="reference internal" href="../../basic/date_format.html#getdate">getdate time</a> string) Specifies maximum ticket life for

-principals in this realm.</dd>

-<dt>-maxrenewlife max_renewable_ticket_life</dt>

-<dd>(<a class="reference internal" href="../../basic/date_format.html#getdate">getdate time</a> string) Specifies maximum renewable life of

-tickets for principals in this realm.</dd>

-<dt>ticket_flags</dt>

-<dd>Specifies global ticket flags for the realm. Allowable flags are

+master_key_name variable in <a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5">kdc.conf</a>.

+</dd>

+<dt>-m</dt><dd>Specifies that the master database password should be read from

+the TTY rather than fetched from a file on the disk.

+</dd>

+<dt>-P password</dt><dd>Specifies the master database password. This option is not

+recommended.

+</dd>

+<dt>-sf stashfilename</dt><dd>Specifies the stash file of the master database password.

+</dd>

+<dt>-s</dt><dd>Specifies that the stash file is to be created.

+</dd>

+<dt>-maxtktlife max_ticket_life</dt><dd>(<a class="reference internal" href="../../basic/date_format.html#getdate">getdate time</a> string) Specifies maximum ticket life for

+principals in this realm.

+</dd>

+<dt>-maxrenewlife max_renewable_ticket_life</dt><dd>(<a class="reference internal" href="../../basic/date_format.html#getdate">getdate time</a> string) Specifies maximum renewable life of

+tickets for principals in this realm.

+</dd>

+<dt>ticket_flags</dt><dd>Specifies global ticket flags for the realm. Allowable flags are

documented in the description of the add_principal command in

-<a class="reference internal" href="kadmin_local.html#kadmin-1">kadmin</a>.</dd>

+<a class="reference internal" href="kadmin_local.html#kadmin-1">kadmin</a>.

+</dd>

</dl>

Example:

-<div class="highlight-default"><div class="highlight"><pre>kdb5_ldap_util -D cn=admin,o=org -H ldaps://ldap-server1.mit.edu

+<div class="highlight-default notranslate"><div class="highlight"><pre>kdb5_ldap_util -D cn=admin,o=org -H ldaps://ldap-server1.mit.edu

-r ATHENA.MIT.EDU create -subtrees o=org -sscope SUB

Password for "cn=admin,o=org":

Initializing database for realm 'ATHENA.MIT.EDU'

@@ -170,56 +162,58 @@ documented in the description of the add_principal command in

Re-enter KDC database master key to verify:

</pre></div>

</div>

-</div>

-<div class="section" id="modify">

+</section>

+<section id="modify">

<h3>modify<a class="headerlink" href="#modify" title="Permalink to this headline">¶</a></h3>

-<div>modify

+<div>modify

[-subtrees subtree_dn_list]

[-sscope search_scope]

[-containerref container_reference_dn]

[-maxtktlife max_ticket_life]

[-maxrenewlife max_renewable_ticket_life]

-[ticket_flags]</div></blockquote>

+[ticket_flags]

+</div></blockquote>

Modifies the attributes of a realm. Options:

-<dl class="docutils">

-<dt>-subtrees subtree_dn_list</dt>

-<dd>Specifies the list of subtrees containing the principals of a

+<dl class="simple">

+<dt>-subtrees subtree_dn_list</dt><dd>Specifies the list of subtrees containing the principals of a

realm. The list contains the DNs of the subtree objects separated

-by colon (<code class="docutils literal">:</code>). This list replaces the existing list.</dd>

-<dt>-sscope search_scope</dt>

-<dd>Specifies the scope for searching the principals under the

+by colon (<code class="docutils literal notranslate">:</code>). This list replaces the existing list.

+</dd>

+<dt>-sscope search_scope</dt><dd>Specifies the scope for searching the principals under the

subtrees. The possible values are 1 or one (one level), 2 or sub

-(subtrees).</dd>

-<dt>-containerref container_reference_dn Specifies the DN of the</dt>

-<dd>container object in which the principals of a realm will be

-created.</dd>

-<dt>-maxtktlife max_ticket_life</dt>

-<dd>(<a class="reference internal" href="../../basic/date_format.html#getdate">getdate time</a> string) Specifies maximum ticket life for

-principals in this realm.</dd>

-<dt>-maxrenewlife max_renewable_ticket_life</dt>

-<dd>(<a class="reference internal" href="../../basic/date_format.html#getdate">getdate time</a> string) Specifies maximum renewable life of

-tickets for principals in this realm.</dd>

-<dt>ticket_flags</dt>

-<dd>Specifies global ticket flags for the realm. Allowable flags are

+(subtrees).

+</dd>

+<dt>-containerref container_reference_dn Specifies the DN of the</dt><dd>container object in which the principals of a realm will be

+created.

+</dd>

+principals in this realm.

+</dd>

+tickets for principals in this realm.

+</dd>

+<dt>ticket_flags</dt><dd>Specifies global ticket flags for the realm. Allowable flags are

documented in the description of the add_principal command in

-<a class="reference internal" href="kadmin_local.html#kadmin-1">kadmin</a>.</dd>

+<a class="reference internal" href="kadmin_local.html#kadmin-1">kadmin</a>.

+</dd>

</dl>

Example:

-<div class="highlight-default"><div class="highlight"><pre>shell% kdb5_ldap_util -r ATHENA.MIT.EDU -D cn=admin,o=org -H

+<div class="highlight-default notranslate"><div class="highlight"><pre>shell% kdb5_ldap_util -r ATHENA.MIT.EDU -D cn=admin,o=org -H

ldaps://ldap-server1.mit.edu modify +requires_preauth

Password for "cn=admin,o=org":

shell%

</pre></div>

</div>

-</div>

-<div class="section" id="view">

+</section>

+<section id="view">

-<div>view</div></blockquote>

+<div>view

+</div></blockquote>

Displays the attributes of a realm.

Example:

Password for "cn=admin,o=org":

Realm Name: ATHENA.MIT.EDU

@@ -231,18 +225,19 @@ documented in the description of the add_principal command in

Ticket flags: DISALLOW_FORWARDABLE REQUIRES_PWCHANGE

</pre></div>

</div>

-</div>

-<div class="section" id="destroy">

+</section>

+<section id="destroy">

<h3>destroy<a class="headerlink" href="#destroy" title="Permalink to this headline">¶</a></h3>

-<div>destroy [-f]</div></blockquote>

+<div>destroy [-f]

+</div></blockquote>

Destroys an existing realm. Options:

-<dl class="docutils">

-<dt>-f</dt>

-<dd>If specified, will not prompt the user for confirmation.</dd>

+<dl class="simple">

+<dt>-f</dt><dd>If specified, will not prompt the user for confirmation.

+</dd>

</dl>

Example:

-<div class="highlight-default"><div class="highlight"><pre>shell% kdb5_ldap_util -r ATHENA.MIT.EDU -D cn=admin,o=org -H

+<div class="highlight-default notranslate"><div class="highlight"><pre>shell% kdb5_ldap_util -r ATHENA.MIT.EDU -D cn=admin,o=org -H

ldaps://ldap-server1.mit.edu destroy

Password for "cn=admin,o=org":

Deleting KDC database of 'ATHENA.MIT.EDU', are you sure?

@@ -251,14 +246,15 @@ OK, deleting database of 'ATHENA.MIT.EDU'...

shell%

</pre></div>

</div>

-</div>

-<div class="section" id="list">

+</section>

+<section id="list">

-<div>list</div></blockquote>

+<div>list

+</div></blockquote>

Lists the names of realms under the container.

Example:

-<div class="highlight-default"><div class="highlight"><pre>shell% kdb5_ldap_util -D cn=admin,o=org -H

+<div class="highlight-default notranslate"><div class="highlight"><pre>shell% kdb5_ldap_util -D cn=admin,o=org -H

Password for "cn=admin,o=org":

ATHENA.MIT.EDU

@@ -267,98 +263,102 @@ shell%

shell%

</pre></div>

</div>

-</div>

-<div class="section" id="stashsrvpw">

+</section>

+<section id="stashsrvpw">

<h3>stashsrvpw<a class="headerlink" href="#stashsrvpw" title="Permalink to this headline">¶</a></h3>

-<div>stashsrvpw

+<div>stashsrvpw

[-f filename]

-name</div></blockquote>

+name

+</div></blockquote>

Allows an administrator to store the password for service object in a

file so that KDC and Administration server can use it to authenticate

to the LDAP server. Options:

-<dl class="docutils">

-<dt>-f filename</dt>

-<dd>Specifies the complete path of the service password file. By

-default, <code class="docutils literal">/usr/local/var/service_passwd</code> is used.</dd>

-<dt>name</dt>

-<dd>Specifies the name of the object whose password is to be stored.

+<dl class="simple">

+<dt>-f filename</dt><dd>Specifies the complete path of the service password file. By

+default, <code class="docutils literal notranslate">/usr/local/var/service_passwd</code> is used.

+</dd>

+<dt>name</dt><dd>Specifies the name of the object whose password is to be stored.

If <a class="reference internal" href="krb5kdc.html#krb5kdc-8">krb5kdc</a> or <a class="reference internal" href="kadmind.html#kadmind-8">kadmind</a> are configured for

simple binding, this should be the distinguished name it will

use as given by the ldap_kdc_dn or ldap_kadmind_dn

variable in <a class="reference internal" href="../conf_files/kdc_conf.html#kdc-conf-5">kdc.conf</a>. If the KDC or kadmind is

configured for SASL binding, this should be the authentication

name it will use as given by the ldap_kdc_sasl_authcid or

-ldap_kadmind_sasl_authcid variable.</dd>

+ldap_kadmind_sasl_authcid variable.

+</dd>

</dl>

Example:

-<div class="highlight-default"><div class="highlight"><pre>kdb5_ldap_util stashsrvpw -f /home/andrew/conf_keyfile

+<div class="highlight-default notranslate"><div class="highlight"><pre>kdb5_ldap_util stashsrvpw -f /home/andrew/conf_keyfile

cn=service-kdc,o=org

Password for "cn=service-kdc,o=org":

Re-enter password for "cn=service-kdc,o=org":

</pre></div>

</div>

-</div>

-<div class="section" id="create-policy">

+</section>

+<section id="create-policy">

<h3>create_policy<a class="headerlink" href="#create-policy" title="Permalink to this headline">¶</a></h3>

-<div>create_policy

+<div>create_policy

[-maxtktlife max_ticket_life]

[-maxrenewlife max_renewable_ticket_life]

[ticket_flags]

-policy_name</div></blockquote>

+policy_name

+</div></blockquote>

Creates a ticket policy in the directory. Options:

-<dl class="docutils">

-<dt>-maxtktlife max_ticket_life</dt>

-<dd>(<a class="reference internal" href="../../basic/date_format.html#getdate">getdate time</a> string) Specifies maximum ticket life for

-principals.</dd>

-<dt>-maxrenewlife max_renewable_ticket_life</dt>

-<dd>(<a class="reference internal" href="../../basic/date_format.html#getdate">getdate time</a> string) Specifies maximum renewable life of

-tickets for principals.</dd>

-<dt>ticket_flags</dt>

-<dd>Specifies the ticket flags. If this option is not specified, by

+<dl class="simple">

+principals.

+</dd>

+tickets for principals.

+</dd>

+<dt>ticket_flags</dt><dd>Specifies the ticket flags. If this option is not specified, by

default, no restriction will be set by the policy. Allowable

flags are documented in the description of the add_principal

-command in <a class="reference internal" href="kadmin_local.html#kadmin-1">kadmin</a>.</dd>

-<dt>policy_name</dt>

-<dd>Specifies the name of the ticket policy.</dd>

+command in <a class="reference internal" href="kadmin_local.html#kadmin-1">kadmin</a>.

+</dd>

+<dt>policy_name</dt><dd>Specifies the name of the ticket policy.

+</dd>

</dl>

Example:

-r ATHENA.MIT.EDU create_policy -maxtktlife "1 day"

-maxrenewlife "1 week" -allow_postdated +needchange

-allow_forwardable tktpolicy

Password for "cn=admin,o=org":

</pre></div>

</div>

-</div>

-<div class="section" id="modify-policy">

+</section>

+<section id="modify-policy">

<h3>modify_policy<a class="headerlink" href="#modify-policy" title="Permalink to this headline">¶</a></h3>

-<div>modify_policy

+<div>modify_policy

[-maxtktlife max_ticket_life]

[-maxrenewlife max_renewable_ticket_life]

[ticket_flags]

-policy_name</div></blockquote>

+policy_name

+</div></blockquote>

Modifies the attributes of a ticket policy. Options are same as for

create_policy.

Example:

ldaps://ldap-server1.mit.edu -r ATHENA.MIT.EDU modify_policy

-maxtktlife "60 minutes" -maxrenewlife "10 hours"

+allow_postdated -requires_preauth tktpolicy

Password for "cn=admin,o=org":

</pre></div>

</div>

-</div>

-<div class="section" id="view-policy">

+</section>

+<section id="view-policy">

<h3>view_policy<a class="headerlink" href="#view-policy" title="Permalink to this headline">¶</a></h3>

-<div>view_policy

-policy_name</div></blockquote>

+<div>view_policy

+policy_name

+</div></blockquote>

Displays the attributes of the named ticket policy.

Example:

Password for "cn=admin,o=org":

Ticket policy: tktpolicy

@@ -367,23 +367,24 @@ command in <a class="reference internal" href="kadmin_local.html#kadmin-1"><span

Ticket flags: DISALLOW_FORWARDABLE REQUIRES_PWCHANGE

</pre></div>

</div>

-</div>

-<div class="section" id="destroy-policy">

+</section>

+<section id="destroy-policy">

<h3>destroy_policy<a class="headerlink" href="#destroy-policy" title="Permalink to this headline">¶</a></h3>

-<div>destroy_policy

+<div>destroy_policy

[-force]

-policy_name</div></blockquote>

+policy_name

+</div></blockquote>

Destroys an existing ticket policy. Options:

-<dl class="docutils">

-<dt>-force</dt>

-<dd>Forces the deletion of the policy object. If not specified, the

-user will be prompted for confirmation before deleting the policy.</dd>

-<dt>policy_name</dt>

-<dd>Specifies the name of the ticket policy.</dd>

+<dl class="simple">

+<dt>-force</dt><dd>Forces the deletion of the policy object. If not specified, the

+user will be prompted for confirmation before deleting the policy.

+</dd>

+<dt>policy_name</dt><dd>Specifies the name of the ticket policy.

+</dd>

</dl>

Example:

-<div class="highlight-default"><div class="highlight"><pre>kdb5_ldap_util -D cn=admin,o=org -H ldaps://ldap-server1.mit.edu

+<div class="highlight-default notranslate"><div class="highlight"><pre>kdb5_ldap_util -D cn=admin,o=org -H ldaps://ldap-server1.mit.edu

-r ATHENA.MIT.EDU destroy_policy tktpolicy

Password for "cn=admin,o=org":

This will delete the policy object 'tktpolicy', are you sure?

@@ -391,14 +392,15 @@ This will delete the policy object 'tktpolicy', are you sure?

** policy object 'tktpolicy' deleted.

</pre></div>

</div>

-</div>

-<div class="section" id="list-policy">

+</section>

+<section id="list-policy">

<h3>list_policy<a class="headerlink" href="#list-policy" title="Permalink to this headline">¶</a></h3>

-<div>list_policy</div></blockquote>

+<div>list_policy

+</div></blockquote>

Lists ticket policies.

Example:

Password for "cn=admin,o=org":

tktpolicy

@@ -406,25 +408,27 @@ This will delete the policy object 'tktpolicy', are you sure?

userpolicy

</pre></div>

</div>

-</div>

-<div class="section" id="environment">

+</section>

+<section id="environment">

<h2>ENVIRONMENT<a class="headerlink" href="#environment" title="Permalink to this headline">¶</a></h2>

See <a class="reference internal" href="../../user/user_config/kerberos.html#kerberos-7">kerberos</a> for a description of Kerberos environment

variables.

-</div>

-<div class="section" id="see-also">

+</section>

+<section id="see-also">

<a class="reference internal" href="kadmin_local.html#kadmin-1">kadmin</a>, <a class="reference internal" href="../../user/user_config/kerberos.html#kerberos-7">kerberos</a>

-</div>

+</section>

+ <div class="clearer"></div>

</div>

<ul>

@@ -515,6 +519,7 @@ variables.

</form>

</div>

</div>

@@ -522,8 +527,8 @@ variables.

- <div class="right" >Release: 1.21.2

+ <div class="right" >Release: 1.21.3

</div>