Comment 4 for bug 229252

Revision history for this message
Jamie Strandboge (jdstrand) wrote : Re: slapd gssapi failure - apparmor profile doesn't support kerberos gssapi

Attached debdiff was tested and verified to work against a krb5 KDC and kerberized slapd. The profile allows 'kr' access to /etc/krb5.keytab as well as all of /etc/ldap/** (so users can put their keytabs in there).

Attached debdiff also fixes bug #243525