From ab7d9f688781b23d3d58df33d06a4ac331447dc7 Mon Sep 17 00:00:00 2001
From: Jelmer Vernooij <jelmer@samba.org>
Date: Mon, 27 Sep 2004 12:20:16 +0000
Subject: [PATCH] Document "use kerberos keytab". Jeremy, can you please check
 this entry?

---
 docs/smbdotconf/security/usekerberoskeytab.xml | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 docs/smbdotconf/security/usekerberoskeytab.xml

diff --git a/docs/smbdotconf/security/usekerberoskeytab.xml b/docs/smbdotconf/security/usekerberoskeytab.xml
new file mode 100644
index 00000000000..59777074eda
--- /dev/null
+++ b/docs/smbdotconf/security/usekerberoskeytab.xml
@@ -0,0 +1,21 @@
+<samba:parameter name="use kerberos keytab"
+                 context="G"
+		 type="boolean"
+                 xmlns:samba="http://samba.org/common">
+<description>
+<para>
+Specifies whether Samba should attempt to maintain service principals in the systems
+keytab file for <constant>host/FQDN</constant> and <constant>cifs/FQDN</constant>.
+</para>
+
+<para>When you are using the heimdal Kerberos libraries, you must also 
+specify the following in <filename>/etc/krb5.conf</filename>:</para>
+
+<programlisting>
+[libdefaults]
+  default_keytab_name = FILE:/etc/krb5.keytab
+</programlisting>
+</description>
+
+<value type="default">False</value>
+</samba:parameter>
-- 
2.11.4.GIT