Bug 827714 - /etc/sysconfig/dirsrv does not work for setting keytabs (need instance specific)
Summary: /etc/sysconfig/dirsrv does not work for setting keytabs (need instance specific)
Keywords:
Status: CLOSED WORKSFORME
Alias: None
Product: Fedora
Classification: Fedora
Component: 389-ds-base
Version: 17
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Rich Megginson
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-06-02 15:50 UTC by Edward Z. Yang
Modified: 2012-06-16 18:59 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2012-06-15 19:46:05 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Edward Z. Yang 2012-06-02 15:50:33 UTC
In the current /etc/sysconfig/dirsrv documentation, there is the following block:

# In order to use SASL/GSSAPI (Kerberos) the directory
# server needs to know where to find its keytab
# file - uncomment the following line and set
# the path and filename appropriately
# if using systemd, omit the "; export VARNAME" at the end
# KRB5_KTNAME=/etc/dirsrv/myname.keytab ; export KRB5_KTNAME

However, uncommenting this line and specifying the keytab appropriately doesn't work; instead, you need to set KRB5_KTNAME the instance specific systemd file e.g. /etc/sysconfig/dirsrv-scripts for the dirsrv to pick up the keytab.

There is also another odd little bug where if /etc/sysconfig/dirsrv is missing, there is an LD_PRELOAD error looking for the Solaris /usr/lib/libumem.so

Comment 1 Rich Megginson 2012-06-15 19:46:05 UTC
Hmm - works for me:

/etc/sysconfig/dirsrv:
...
KRB5_KTNAME=/etc/dirsrv/myname.keytab
...
RANDOM_ENV_VAR=1
...

start directory server using systemctl start dirsrv.target

ps -ef|grep slapd

cat /proc/pid-of-slapd/environ | tr '\0' '\n'
...
KRB5_KTNAME=/etc/dirsrv/myname.keytab
...
RANDOM_ENV_VAR=1
...

Comment 2 Edward Z. Yang 2012-06-16 18:59:07 UTC
Hm, in that case, the bug probably was me forgetting to follow the instructions 'if using systemd, omit the "; export VARNAME" at the end'.


Note You need to log in before you can comment on or make changes to this bug.