Re: GSSAPI Authentication

From: Andreas Winkelmann (no email)
Date: Fri Jan 02 2004 - 05:03:17 EST


Am Freitag, 2. Januar 2004 10:51 schrieb :

> Aren't some files, such as "/etc/hosts", automatically copied into the
> jail when they are out of date? How can I make the keytab one of these?

No, you have to do it manually. But there is a script in the source-tarball.
Maybe you can modify it to copy this file too.

> My kerberos knowledge is also limited, but I gather that the keytab
> should not be world readable. However, though it is readable by the
> user postfix, postfix complains:
>
> 7063 open("/etc/krb5.keytab", O_RDONLY) = -1 EACCES (Permission denied)

/etc/krb5.keytab or /var/spool/postfix/etc/krb5.keytab?

-- 
	Andreas







Hosted Email Solutions

Invaluement Anti-Spam DNSBLs



Powered By FreeBSD   Powered By FreeBSD