From ee583b5929925b2e9658385430da4f73b4883287 Mon Sep 17 00:00:00 2001
From: Cullum Smith <cullum@sacredheartsc.com>
Date: Thu, 26 Sep 2024 09:02:34 -0400
Subject: update default keytab locations

---
 files/etc/krb5.conf.common | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'files/etc/krb5.conf.common')

diff --git a/files/etc/krb5.conf.common b/files/etc/krb5.conf.common
index 3274deb..7eed6d2 100644
--- a/files/etc/krb5.conf.common
+++ b/files/etc/krb5.conf.common
@@ -4,7 +4,8 @@
   dns_lookup_realm = false
   allow_weak_crypto = false
   permitted_enctypes = aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96
-  default_client_keytab_name = /var/db/keytabs/%{euid}.keytab
+  default_keytab_name = FILE:/var/krb5/user/%{euid}/keytab
+  default_client_keytab_name = FILE:/var/krb5/user/%{euid}/client.keytab
 
 [appdefaults]
   pam = {
-- 
cgit v1.2.3