Tom Yu tlyu at MIT.EDU
Thu Mar 20 11:26:51 EDT 2008

Mark Phalan <Mark.Phalan at Sun.COM> writes:

> It might be nice to remove the necessity to configure a keytab for
> kadmind (kadm5.keytab). The key data that kadmind needs could be taken
> directly from the kerberos db. Doing it that way would simplify
> administration/setup and remove a whole class of potential configuration
> problems (kadm5.keytab missing principals, containing old principals,
> wrong path to kadm5.keytab specified etc.)

This was already done in a prior release.  I don't remember which
release introduced it.  Some of the documentation may still refer to
kadm5.keytab, though.


More information about the krbdev mailing list