[36155] in Kerberos
Re: krb5-1.12.1 and client keytab file
daemon@ATHENA.MIT.EDU (Michael-O)
Thu May 29 16:57:33 2014
Message-ID: <53879ECA.7070202@gmx.net>
Date: Thu, 29 May 2014 22:55:38 +0200
From: Michael-O <1983-01-06@gmx.net>
MIME-Version: 1.0
To: Brandon Allbery <ballbery@sinenomine.net>,
"kerberos@mit.edu" <kerberos@mit.edu>
In-Reply-To: <1401388718.38143.13.camel@vikktakkht.oh3.sinenomine.net>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Am 2014-05-29 20:38, schrieb Brandon Allbery:
> On Thu, 2014-05-29 at 13:35 -0400, squidmobile@fastmail.fm wrote:
>> KRB5_CLIENT_KTNAME=./some.key.file kinit
>> at this point, kinit did what it wanted and not what i expected.
>
> I am not sure kinit will automatically use the keytab just because the
> environment variable is there. I would expect the envar sets a default
> for the -t (or possibly -i, in which case you need to specify that)
> option, and you still need to specify -k for it to use a keytab at all.
kinit won't, because kinit has a different approach to the one the
GSS-API and the Krb 5 backend has.
Michael
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
