aboutsummaryrefslogtreecommitdiff
path: root/crypto/krb5/doc/html/_sources/admin/realm_config.rst.txt
diff options
context:
space:
mode:
Diffstat (limited to 'crypto/krb5/doc/html/_sources/admin/realm_config.rst.txt')
-rw-r--r--crypto/krb5/doc/html/_sources/admin/realm_config.rst.txt10
1 files changed, 10 insertions, 0 deletions
diff --git a/crypto/krb5/doc/html/_sources/admin/realm_config.rst.txt b/crypto/krb5/doc/html/_sources/admin/realm_config.rst.txt
index 9f5ad5074650..32c5b9cf11ee 100644
--- a/crypto/krb5/doc/html/_sources/admin/realm_config.rst.txt
+++ b/crypto/krb5/doc/html/_sources/admin/realm_config.rst.txt
@@ -196,6 +196,13 @@ using the **kdc**, **master_kdc**, **admin_server**, and
explicit server locations, providing SRV records will still benefit
unconfigured clients, and be useful for other sites.
+Clients can be configured with the **sitename** realm variable (new in
+release 1.22). If a site name is set, the client first attempts SRV
+record lookups with ".*sitename*._sites" inserted after the service
+and protocol name and before the Kerberos realm. Site-specific
+records may indicate servers more proximal to the client, allowing for
+faster access.
+
.. _kdc_discovery:
@@ -244,6 +251,9 @@ URI lookups are enabled by default, and can be disabled by setting
precedence over SRV lookups, falling back to SRV lookups if no URI
records are found.
+The **sitename** variable in the :ref:`realms` section of
+:ref:`krb5.conf(5)` applies to URI lookups as well as SRV lookups.
+
.. _db_prop: