diff options
| author | Jeff Layton <jlayton@samba.org> | 2013-05-29 14:54:26 -0400 |
|---|---|---|
| committer | Jeff Layton <jlayton@samba.org> | 2013-05-29 14:54:26 -0400 |
| commit | e99024cf8f70a1337e09eb9e97a57926f7bc8cac (patch) | |
| tree | 416692a104a9dc5ed24ba462d95fba3656a8da2c /cifs.upcall.8.in | |
| parent | 76dacff50330dcc55ad5c08bf8610e0d7e3ca2ec (diff) | |
| download | cifs-utils-e99024cf8f70a1337e09eb9e97a57926f7bc8cac.tar.gz cifs-utils-e99024cf8f70a1337e09eb9e97a57926f7bc8cac.tar.bz2 cifs-utils-e99024cf8f70a1337e09eb9e97a57926f7bc8cac.zip | |
cifs.upcall: allow users to specify dedicated keytab on command-line
Currently cifs.upcall only looks at the default system keytab
(/etc/krb5.keytab). It's often the case however that a dedicated keytab
is desirable. Allow administrators to set one on the command-line.
Reported-by: steve <steve@steve-ss.com>
Signed-off-by: Jeff Layton <jlayton@samba.org>
Diffstat (limited to 'cifs.upcall.8.in')
| -rw-r--r-- | cifs.upcall.8.in | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/cifs.upcall.8.in b/cifs.upcall.8.in index 3ae0562..50f79d1 100644 --- a/cifs.upcall.8.in +++ b/cifs.upcall.8.in @@ -22,7 +22,7 @@ cifs.upcall \- Userspace upcall helper for Common Internet File System (CIFS) .SH "SYNOPSIS" .HP \w'\ 'u -cifs\&.upcall [\-\-trust\-dns|\-t] [\-\-version|\-v] [\-\-legacy\-uid|\-l] [--krb5conf=/path/to/krb5.conf|-k /path/to/...] {keyid} +cifs\&.upcall [\-\-trust\-dns|\-t] [\-\-version|\-v] [\-\-legacy\-uid|\-l] [--krb5conf=/path/to/krb5.conf|-k /path/to/krb5.conf] [--keytab=/path/to/keytab|-K /path/to/keytab] {keyid} .SH "DESCRIPTION" .PP This tool is part of the cifs-utils suite\&. @@ -44,6 +44,11 @@ This option allows administrators to set an alternate location for the krb5.conf file that cifs.upcall will use. .RE .PP +\--keytab=/path/to/keytab|-K /path/to/keytab +.RS 4 +This option allows administrators to specify a keytab file to be used. When a user has no credential cache already established, cifs.upcall will attempt to use this keytab to acquire them. The default is the system-wide keytab /etc/krb5.keytab. +.RE +.PP \-\-trust\-dns|\-t .RS 4 With krb5 upcalls, the name used as the host portion of the service principal defaults to the hostname portion of the UNC\&. This option allows the upcall program to reverse resolve the network address of the server in order to get the hostname\&. |