Added a debug program that performs conversions from DNS names to realms.

[mod_auth_kerb.git] / INSTALL

diff --git a/INSTALL b/INSTALL
index 3459469..08e4c4b 100644 (file)
--- a/INSTALL
+++ b/INSTALL
@@ -81,6 +81,12 @@ used for. To create the account you can use standard AD tools.  Make sure that
 the user account has "Password never expires" set and write down the password
 you set for the account (you will need it later).
 
+When using ticket based authentication (KrbMethodNegotiate) and also wanting
+to save the ticket (KrbSaveCredentials), the user account for the Kerberos
+principal must have the option "Account is trusted for delegation" set. This
+enables to user account to delegate the tickets to the server for further
+authentication.
+
 If you want to kerberize additional hosts you need to create one user account
 per each kerberized host.
 
@@ -176,6 +182,10 @@ following environment variables:
 before starting Mozilla. You will see debugging messages logged in the file
 specified by NSPR_LOG_FILE (/tmp/negotiateauth.log)
 
+KDE Konqueror
+-------------
+http://www.grolmsnet.de/kerbtut/konqueror.html
+
 6. Access control
 -----------------
 If you want only particular users to be able to access the secured area, you