Re: how to specify a different keytab file?

[Frank Swasey <Frank.Swasey@uvm.edu>]

On Apr 4 at 3:44pm, Andreas Hasenack wrote:

> With openldap-2.0.22, how can I specify a different keytab file
> for the slapd daemon, instead of the /etc/krb5.keytab one?

On RedHat Linux, add the following line to /etc/sysconfig/ldap

export KRB5_KTNAME="FILE:_path_to_your_file"

And make sure the file is owned by the user you are going to run slapd
as...

On my own system, that file is /etc/openldap/ldap.keytab and is mode 600
owned by user ldap, group ldap (slapd runs as user ldap).  Therefore,
the line in my /etc/sysconfig/ldap file is:

export KRB5_KTNAME="FILE:/etc/openldap/ldap.keytab"

If you are not running RedHat Linux, in what-ever script you have set up
to start slapd, just make sure the KRB5_KTNAME environment variable is
set with the appropriate value and exported prior to slapd being
started.

HTH,
-- 
Frank Swasey                    | http://www.uvm.edu/~fcs
Systems Programmer              | Always remember: You are UNIQUE,
University of Vermont           |    just like everyone else.
                    === God Bless Us All ===