Skip to content

Commit 31fdb76

Browse files
authored
[DOCS] Document authorization_realms for Kerberos realm (#35927)
This commit adds documentation for authorization_realms setting for the Kerberos realm and also corrects a typo in existing documentation. Co-authored-by: @A-Hall
1 parent df1e02d commit 31fdb76

File tree

1 file changed

+9
-3
lines changed

1 file changed

+9
-3
lines changed

docs/reference/settings/security-settings.asciidoc

Lines changed: 9 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -285,7 +285,7 @@ this setting is not valid. For more information on
285285
the different modes, see {xpack-ref}/ldap-realm.html[LDAP realms].
286286

287287
`authorization_realms`::
288-
The names of the realms that should be consulted for delegate authorization.
288+
The names of the realms that should be consulted for delegated authorization.
289289
If this setting is used, then the LDAP realm does not perform role mapping and
290290
instead loads the user from the listed realms. The referenced realms are
291291
consulted in the order that they are defined in this list.
@@ -794,7 +794,7 @@ Specifies the {xpack-ref}/security-files.html[location] of the
794794
Defaults to `ES_PATH_CONF/role_mapping.yml`.
795795

796796
`authorization_realms`::
797-
The names of the realms that should be consulted for delegate authorization.
797+
The names of the realms that should be consulted for delegated authorization.
798798
If this setting is used, then the PKI realm does not perform role mapping and
799799
instead loads the user from the listed realms.
800800
See {stack-ov}/realm-chains.html#authorization_realms[Delegating authorization to another realm]
@@ -923,7 +923,7 @@ Specifies whether to populate the {es} user's metadata with the values that are
923923
provided by the SAML attributes. Defaults to `true`.
924924

925925
`authorization_realms`::
926-
The names of the realms that should be consulted for delegate authorization.
926+
The names of the realms that should be consulted for delegated authorization.
927927
If this setting is used, then the SAML realm does not perform role mapping and
928928
instead loads the user from the listed realms.
929929
See {stack-ov}/realm-chains.html#authorization_realms[Delegating authorization to another realm]
@@ -1170,6 +1170,12 @@ this period of time. Specify the time period using the standard {es}
11701170
`cache.max_users`:: The maximum number of user entries that can live in the
11711171
cache at any given time. Defaults to 100,000.
11721172

1173+
`authorization_realms`::
1174+
The names of the realms that should be consulted for delegated authorization.
1175+
If this setting is used, then the Kerberos realm does not perform role mapping and
1176+
instead loads the user from the listed realms.
1177+
See {stack-ov}/realm-chains.html#authorization_realms[Delegating authorization to another realm]
1178+
11731179
[float]
11741180
[[load-balancing]]
11751181
===== Load balancing and failover

0 commit comments

Comments
 (0)