On Mon, 2007-03-12 at 12:45 -0400, John T. Guthrie wrote:
Hello all,
I was just looking through the Kerberos code in rlm_krb5.c, and I found this little code snippet:
static CONF_PARSER module_config[] = { { "keytab", PW_TYPE_STRING_PTR, offsetof(rlm_krb5_t,keytab), NULL, NULL }, { "service_principal", PW_TYPE_STRING_PTR, offsetof(rlm_krb5_t,service_princ), NULL, NULL }, { NULL, -1, 0, NULL, NULL } };
Does this mean that the kerberos module can be configured with both a keytab and a service principal? (In which case, is the default service principal the string "host"?)
Thanks.
Well, when all else fails, read the documentation. I just checked the wiki on the website, and it says that the answer to my question is yes. However, I went ahead and wrote a patch to the radiusd.conf.in file in the source code to add in ome documentation for configuring Kerberos. Where would be the best place to post that patch. Thanks. -- John Guthrie guthrie@counterexample.org