INN commit: trunk/doc/pod (auth_krb5.pod)
rra at isc.org
Thu Aug 20 23:37:16 UTC 2009
Date: Thursday, August 20, 2009 @ 16:37:16
Recommend against using auth_krb5
In the auth_krb5 man page, recommend using ckpasswd with PAM support
and a Kerberos PAM module instead of this authenticator.
auth_krb5.pod | 6 ++++++
1 file changed, 6 insertions(+)
--- auth_krb5.pod 2009-08-20 23:33:13 UTC (rev 8588)
+++ auth_krb5.pod 2009-08-20 23:37:16 UTC (rev 8589)
@@ -16,6 +16,12 @@
not as secure as real Kerberos authentication. It generally should only
be used with NNTP over TLS to protect the password from sniffing.
+Normally, you do not want to use this authenticator. Instead, use
+ckpasswd with PAM support and configure the nnrpd PAM stack to use a
+Kerberos PAM module. A full Kerberos PAM module is more sophisticated
+about how it validates passwords and has a much broader array of options
+than this authenticator.
More information about the inn-committers