Documentation for #2372

5 years ago · 8125dcb6b7
parent 8b9c6be6f6
commit 8125dcb6b7
1 changed files with 1 additions and 0 deletions
--- a/doc/sources/admin/authkerberos.rst
+++ b/doc/sources/admin/authkerberos.rst
@ -34,6 +34,7 @@ and configure the following parameters:
   Kerberos code to validate Kerberos ticket
 -  **Remove domain in username**: set to "enabled" to strip username
   value and remove the '@domain'.
+-  **Allowed domains**: if set, tickets will only be accepted if they come from one of the domains listed here. This is a space-separated list. This feature can be useful when using :doc:`combination<authcombination>` and cross-realm Kerberos trusts.


 .. attention::