25 Feb
2018
25 Feb
'18
10:33 a.m.
[mods-available/krb5] krb5 { keytab = /etc/krb5.keytab service_principal = 'host/ix-radius1.ad.example.net' # different for each radius server pool { ... everything as defaults ... } }
I wonder if there is some sort of leak and I should set "uses" or "lifetime" to limit how long each krb5 instance is used for?
Go for it. I’m not sure that kerberos handles are actually bound to connections though i.e. destroying a handle might not actually do anything helpful if libkerberos does its own connection management. -Arran