On Thu, Nov 08, 2007 at 02:50:54PM -0600, John Hascall wrote: > > One time when you may want/need to use a keytab file > other than /etc/krb5.keytab is if the service runs > as a user other than root -- although a lot of times > running as a different user is coupled with running > in a chroot-jail so the file can still be known to > the application as /etc/krb5.keytab -- for example, > from one of my servers > > vs-1# ls -l /var/chroot/accessd/etc/krb5.keytab > -r-------- 1 accessd accessd 137 Oct 30 11:47 > /var/chroot/accessd/etc/krb5.keytab > One other thing to point out is that some services expect to have their own keytab (for the reasons you mentioned). For example, OpenLDAP has (at least on my Debian servers) a default keytab of /etc/ldap/ldap.keytab.
Regards, -Roberto -- Roberto C. Sánchez http://people.connexer.com/~roberto http://www.connexer.com
signature.asc
Description: Digital signature
________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
