From 4286cdd0dbb67cdab0d3f0045aebec1884777fe5 Mon Sep 17 00:00:00 2001 From: ebner Date: Wed, 29 Apr 2026 10:52:22 +0200 Subject: [PATCH] add location of system keytab --- docs/admin-guide/configuration/basic/kerberos.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/admin-guide/configuration/basic/kerberos.md b/docs/admin-guide/configuration/basic/kerberos.md index 77ad2a22..2b9dd0bc 100644 --- a/docs/admin-guide/configuration/basic/kerberos.md +++ b/docs/admin-guide/configuration/basic/kerberos.md @@ -26,6 +26,6 @@ kerberos::additional_services: - 'http' ``` -By doing so, the respective service principal will be added to the AD and the system keytab. The service keytab should then be extracted from the system keytab and used for the respective service, e.g. Apache HTTPD. +By doing so, the respective service principal will be added to the AD and the system keytab (/etc/krb5.keytab). The service keytab should then be extracted from the system keytab and used for the respective service, e.g. Apache HTTPD. The ownership and permissions of the extracted service keytab should be set appropriately to the user running the service to ensure security. Afterwards the service can be configured to use the extracted keytab for e.g. authentication.