[Pkg-openldap-devel] r826 - openldap/trunk-2.3/debian

[Russ Allbery]

Author: rra
Date: 2007-06-01 23:50:49 +0000 (Fri, 01 Jun 2007)
New Revision: 826

Modified:
   openldap/trunk-2.3/debian/changelog
   openldap/trunk-2.3/debian/slapd.default
Log:
* Add to /etc/default/slapd a commented-out example of how to change the
  keytab file used for GSSAPI authentication.  (Closes: #412017)

Modified: openldap/trunk-2.3/debian/changelog
===================================================================
--- openldap/trunk-2.3/debian/changelog	2007-06-01 23:25:21 UTC (rev 825)
+++ openldap/trunk-2.3/debian/changelog	2007-06-01 23:50:49 UTC (rev 826)
@@ -7,8 +7,10 @@
     as the slapd user.  Thanks, Glennie Vignarajah.  (Closes: #412575)
   * Redirect fd 3 to /dev/null in the slapd init script for additional
     robustness when debconf is running.  (Closes: #227482)
+  * Add to /etc/default/slapd a commented-out example of how to change the
+    keytab file used for GSSAPI authentication.  (Closes: #412017)
 
- -- Russ Allbery <rra at debian.org>  Fri, 01 Jun 2007 16:25:03 -0700
+ -- Russ Allbery <rra at debian.org>  Fri, 01 Jun 2007 16:50:23 -0700
 
 openldap2.3 (2.3.35-1) unstable; urgency=low
 

Modified: openldap/trunk-2.3/debian/slapd.default
===================================================================
--- openldap/trunk-2.3/debian/slapd.default	2007-06-01 23:25:21 UTC (rev 825)
+++ openldap/trunk-2.3/debian/slapd.default	2007-06-01 23:50:49 UTC (rev 826)
@@ -25,6 +25,11 @@
 # Example usage:
 # SLAPD_SERVICES="ldap://127.0.0.1:389/ ldaps:/// ldapi:///"
 
+# For Kerberos authentication (via SASL), slapd by default uses the system
+# keytab file (/etc/krb5.keytab).  To use a different keytab file,
+# uncomment this line and change the path.
+#export KRB5_KTNAME=/etc/krb5.keytab
+
 # Additional options to pass to slapd and slurpd
 SLAPD_OPTIONS=""
 SLURPD_OPTIONS=""