aboutsummaryrefslogtreecommitdiffstats
path: root/kerberos.sh
diff options
context:
space:
mode:
authorLexi Winter <ivy@FreeBSD.org>2025-06-03 14:02:32 +0100
committerLexi Winter <ivy@FreeBSD.org>2025-06-03 14:02:32 +0100
commit64ac331b10cc7d4907207c3d75cfb88c9ec51117 (patch)
tree6ab1613061bb2dae798f4b82006b1d10aee1dc14 /kerberos.sh
parent377879d3a4b28ff57b19fc9cba6fa0a2152cb3b2 (diff)
downloadlfacme-64ac331b10cc7d4907207c3d75cfb88c9ec51117.tar.gz
lfacme-64ac331b10cc7d4907207c3d75cfb88c9ec51117.tar.bz2
kerberos.sh: make keytab configurable
Diffstat (limited to 'kerberos.sh')
-rw-r--r--kerberos.sh6
1 files changed, 5 insertions, 1 deletions
diff --git a/kerberos.sh b/kerberos.sh
index 9b5d3ae..dad7aad 100644
--- a/kerberos.sh
+++ b/kerberos.sh
@@ -22,7 +22,11 @@ if [ "$METHOD" != "dns-01" ]; then
exit 1
fi
-if ! kinit -k -t /etc/krb5.keytab "$ACME_KERBEROS_PRINCIPAL"; then
+if [ -z "$ACME_KERBEROS_KEYTAB" ]; then
+ ACME_KERBEROS_KEYTAB="/etc/krb5.keytab"
+fi
+
+if ! kinit -k -t "$ACME_KERBEROS_KEYTAB" "$ACME_KERBEROS_PRINCIPAL"; then
_fatal "failed to obtain a Kerberos ticket"
fi