[Pkg-openldap-devel] Bug#412017: slapd: Add an option to specify the Kerberos keytab to use

[Daniel 'NebuchadnezzaR' Dehennin]

Package: slapd
Version: 2.3.30-4
Severity: wishlist

Hello,

I'm using OpenLDAP with GSSAPI authentication.

Is it possible to specify the keytab file to use with an option like:
keytab-file /etc/ldap/ldap.keytab

for example ?

It will permit to use different keytab for each services, for now I add
export KRB5_KTNAME="FILE:/etc/ldap/ldap.keytab"

to the /etc/default/slapd file.

Regards.

-- System Information:
Debian Release: 4.0
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18.3-vs2.2.0-pre4+thorr.1
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)

Versions of packages slapd depends on:
ii  adduser                   3.102          Add and remove users and groups
ii  coreutils                 5.97-5.3       The GNU core utilities
ii  debconf [debconf-2.0]     1.5.11         Debian configuration management sy
ii  libc6                     2.3.6.ds1-12   GNU C Library: Shared libraries
ii  libdb4.2                  4.2.52+dfsg-1  Berkeley v4.2 Database Libraries [
ii  libiodbc2                 3.52.4-4       iODBC Driver Manager
ii  libldap-2.3-0             2.3.30-4       OpenLDAP libraries
ii  libltdl3                  1.5.22-4       A system independent dlopen wrappe
ii  libperl5.8                5.8.8-7        Shared Perl library
ii  libsasl2-2                2.1.22.dfsg1-8 Authentication abstraction library
ii  libslp1                   1.2.1-6        OpenSLP libraries
ii  libssl0.9.8               0.9.8c-4       SSL shared libraries
ii  libwrap0                  7.6.dbs-12     Wietse Venema's TCP wrappers libra
ii  perl [libmime-base64-perl 5.8.8-7        Larry Wall's Practical Extraction 
ii  psmisc                    22.3-1         Utilities that use the proc filesy

Versions of packages slapd recommends:
pn  libsasl2-modules              <none>     (no description available)

-- debconf information excluded