From 032e20dc9da3c0a51bfc53d4cfa5afe7293e995d Mon Sep 17 00:00:00 2001
From: henning <henning@openbsd.org>
Date: Tue, 22 Apr 2014 12:53:48 +0000
Subject: [PATCH] no more kerb, ok kettenis

---
 usr.bin/su/su.1 | 27 ++-------------------------
 1 file changed, 2 insertions(+), 25 deletions(-)

diff --git a/usr.bin/su/su.1 b/usr.bin/su/su.1
index 3c203f9bc2e..3139d66a858 100644
--- a/usr.bin/su/su.1
+++ b/usr.bin/su/su.1
@@ -1,4 +1,4 @@
-.\"	$OpenBSD: su.1,v 1.28 2010/12/10 19:32:21 millert Exp $
+.\"	$OpenBSD: su.1,v 1.29 2014/04/22 12:53:48 henning Exp $
 .\"
 .\" Copyright (c) 1988, 1990 The Regents of the University of California.
 .\" All rights reserved.
@@ -29,7 +29,7 @@
 .\"
 .\"	from: @(#)su.1	6.12 (Berkeley) 7/29/91
 .\"
-.Dd $Mdocdate: December 10 2010 $
+.Dd $Mdocdate: April 22 2014 $
 .Dt SU 1
 .Os
 .Sh NAME
@@ -50,28 +50,6 @@ The
 utility allows a user to run a shell with the user and group ID of another user
 without having to log out and in as that other user.
 .Pp
-If Kerberos is in use, the password for
-.Ar login
-(or for
-.Dq Ar login Ns /root ,
-if no login is provided) is requested, and
-.Nm
-switches to
-that user and group ID after obtaining a Kerberos ticket granting access.
-A shell is then executed, and any additional
-.Ar "shell arguments"
-after the login name
-are passed to the shell.
-If Kerberos is not configured or if there is a Kerberos error,
-.Nm
-falls back to local password authentication to validate the password for
-.Ar login .
-If
-.Nm
-is executed by root, no password is requested and a shell
-with the appropriate user ID is executed; no additional Kerberos tickets
-are obtained.
-.Pp
 By default, the environment is unmodified with the exception of
 .Ev LOGNAME ,
 .Ev HOME ,
@@ -128,7 +106,6 @@ this option prevents it from reading the
 .Dq Pa .cshrc
 file.
 .It Fl K
-Do not attempt to use Kerberos to authenticate the user.
 This is shorthand for
 .Dq Nm Fl a Ar passwd ,
 provided for backwards compatibility.
-- 
2.20.1