[Samba] Generating keytab on a read-only file system

Taner Tas taner76 at gmail.com
Wed Dec 26 10:21:19 UTC 2018

> > 
> > dedicated keytab file = /tmp/krb5.keytab
> > 
> > For which programs do you use the keytab?  
> I already tried that. But still tries to write at /etc. It seems this
> parameter used when you have a keytab already.

Ok, It seems I figured it out:

Once on nfs-root (server):
ln -s /var/lib/samba/krb5.keytab /etc/krb5.keytab

Then make this run during boot on client (pre samba and sssd):
export KEYTAB="/var/lib/samba/krb5.keytab"
[ -f $KEYTAB ] || cat /dev/null > $KEYTAB

This way, keytab content created in an existing but an empty file.
Taner Tas

More information about the samba mailing list