[pubcookie-users] kerberos service key

[Kevin Bowen]

In order to get pubcookie working with kerberos as the authentication mechanism, I had to set my keytab readable by apache. I've been told in the past that your keytab should always be readable only by root for security reasons (though I'm not sure what reasons specifically). Is this a legitmate concern as far as anyone knows?

************************************************************************
Kevin Bowen
UCSD ACS/Network Operations, Customer Support Help Desk
kevin at ucsd.edu / (858) 534-1857  /  http://www-no.ucsd.edu
Phone Support: 7 AM to 7 PM / Walk-in Support: 10 AM to 3:30 PM
************************************************************************