[Samba] dnsupdate: TKEY is unacceptable

Dr. Lars Hanke lars at lhanke.de
Wed Jun 11 10:10:26 MDT 2014


Yes, the bind user can read the keytab. Otherwise, named wouldn't start. 
In fact, I had to define KRB5_KEYTAB to make named start.

Am 11.06.2014 13:15, schrieb steve:
> On Wed, 2014-06-11 at 08:20 +0200, Lars Hanke wrote:
>> I set up samba with BIND9_DLZ as described in the official howto. Bind
>
>> export KRB5_KTNAME=/srv/files/private/dns.keytab
>
> Can the bind user read the keytab?
>



More information about the samba mailing list