19 Oct
2016
19 Oct
'16
7:01 a.m.
On 19/10/2016 11:57, Brian Candler wrote:
As an aside, I wonder if someone can answer this question. Can freeradius itself fetch and refresh its own kerberos tickets using a keytab?
Argh. As soon as I posted, I realised the problem: the keytab was only readable by root. I set a location and permissions to make it readable: # ls -l /etc/radiusd.keytab -rw-r----- 1 root freerad 386 Oct 19 10:59 /etc/radiusd.keytab and now: KRB5_CLIENT_KTNAME=/etc/radiusd.keytab freeradius -X works just fine. Sorry about the noise. Regards, Brian.