On 10/18/2016 10:55 AM, Brian Candler wrote:
On 18/10/2016 15:24, Brendan Kearney wrote:
i am setting
KRB5_CLIENT_KTNAME = '/etc/raddb/radius.keytab'
in the sasl {} stanzas in mods-available/ldap, As it says in the sample config:
# Unfortunately the only way to control Keberos [sic] here is through # environmental variables, as cyrus-sasl provides no API to # set the krb5 config directly.
So the way I got it to work was to set the environment variable in /etc/default/freeradius [for Ubuntu, when running as a service], or directly when running from the command line:
KRB5_CCNAME=... freeradius -X
If it's possible to set environment variables *within* freeradius's configuration, I don't know how to do that.
Regards,
Brian.
thanks, i figured it was going to be something along those lines. with systemd based OS's, you can created a directory, such as /etc/systemd/system/radiusd.d/ and put a .conf file in there to override or augment the service, but that does nothing for command line. running radiusd -X will never pick up the systemd "helper" config. is there a way have that "helper" sourced when running radiusd -X?