Hello all, I was just looking through the Kerberos code in rlm_krb5.c, and I found this little code snippet: static CONF_PARSER module_config[] = { { "keytab", PW_TYPE_STRING_PTR, offsetof(rlm_krb5_t,keytab), NULL, NULL }, { "service_principal", PW_TYPE_STRING_PTR, offsetof(rlm_krb5_t,service_princ), NULL, NULL }, { NULL, -1, 0, NULL, NULL } }; Does this mean that the kerberos module can be configured with both a keytab and a service principal? (In which case, is the default service principal the string "host"?) Thanks. -- John Guthrie guthrie@counterexample.org
On Mon, 2007-03-12 at 12:45 -0400, John T. Guthrie wrote:
Hello all,
I was just looking through the Kerberos code in rlm_krb5.c, and I found this little code snippet:
static CONF_PARSER module_config[] = { { "keytab", PW_TYPE_STRING_PTR, offsetof(rlm_krb5_t,keytab), NULL, NULL }, { "service_principal", PW_TYPE_STRING_PTR, offsetof(rlm_krb5_t,service_princ), NULL, NULL }, { NULL, -1, 0, NULL, NULL } };
Does this mean that the kerberos module can be configured with both a keytab and a service principal? (In which case, is the default service principal the string "host"?)
Thanks.
Well, when all else fails, read the documentation. I just checked the wiki on the website, and it says that the answer to my question is yes. However, I went ahead and wrote a patch to the radiusd.conf.in file in the source code to add in ome documentation for configuring Kerberos. Where would be the best place to post that patch. Thanks. -- John Guthrie guthrie@counterexample.org
John T. Guthrie wrote:
Well, when all else fails, read the documentation. I just checked the wiki on the website, and it says that the answer to my question is yes. However, I went ahead and wrote a patch to the radiusd.conf.in file in the source code to add in ome documentation for configuring Kerberos. Where would be the best place to post that patch.
This list is OK for small patches. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
On Tue, 2007-03-13 at 17:31 +0100, Alan DeKok wrote:
John T. Guthrie wrote:
Well, when all else fails, read the documentation. I just checked the wiki on the website, and it says that the answer to my question is yes. However, I went ahead and wrote a patch to the radiusd.conf.in file in the source code to add in ome documentation for configuring Kerberos. Where would be the best place to post that patch.
This list is OK for small patches.
Alan DeKok.
Alan, Here is the patch that I mentioned. This is a patch against the radiusd.conf.in file in 1.1.5. Thanks. -- John Guthrie guthrie@counterexample.org
participants (2)
-
Alan DeKok -
John T. Guthrie