From 8bd3f03cd4c2ab1cf1b28172649321d46cdc5494 Mon Sep 17 00:00:00 2001 From: Jim Garlick Date: Fri, 21 Apr 2017 11:28:54 -0700 Subject: [PATCH] gssapi: add NAMETYPE socket opts to zmq_gssapi.7 Problem: new GSSAPI socket options are not documented. Solution: add PRINCIPAL NAMES section to zmq_gssapi.7 --- doc/zmq_gssapi.txt | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) diff --git a/doc/zmq_gssapi.txt b/doc/zmq_gssapi.txt index b98a4816..6834599b 100644 --- a/doc/zmq_gssapi.txt +++ b/doc/zmq_gssapi.txt @@ -44,6 +44,26 @@ ZMQ_GSSAPI_PLAINTEXT option. Both the client and server must set this option to the same value. +PRINCIPAL NAMES +--------------- +Principal names specified with the ZMQ_GSSAPI_SERVICE_PRINCIPAL or +ZMQ_GSSAPI_PRINCIPAL options are interpreted as "host based" name types +by default. The ZMQ_GSSAPI_PRINCIPAL_NAMETYPE and +ZMQ_GSSAPI_SERVICE_PRINCIPAL_NAMETYPE options may be used to change the +name type to one of: + +*ZMQ_GSSAPI_NT_HOSTBASED*:: +The name should be of the form "service" or "service@hostname", +which will parse into a principal of "service/hostname" +in the local realm. This is the default name type. +*ZMQ_GSSAPI_NT_USER_NAME*:: +The name should be a local username, which will parse into a single-component +principal in the local realm. +*ZMQ_GSSAPI_NT_KRB5_PRINCIPAL*:: +The name is a principal name string. This name type only works with +the krb5 GSSAPI mechanism. + + SEE ALSO -------- linkzmq:zmq_setsockopt[3]