Skip to content

Commit 7062051

Browse files
Change plugins.security.kerberos.krb5_filepath to a relative path (#10985) (#11036)
1 parent 73df7a0 commit 7062051

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

_security/authentication-backends/kerberos.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ In order to use Kerberos authentication, you must set the following settings in
1616
In `opensearch.yml`, define the following settings:
1717

1818
```yml
19-
plugins.security.kerberos.krb5_filepath: '/etc/krb5.conf'
19+
plugins.security.kerberos.krb5_filepath: 'krb5.conf'
2020
plugins.security.kerberos.acceptor_keytab_filepath: 'opensearch_keytab.tab'
2121
plugins.security.kerberos.acceptor_principal: 'HTTP/localhost'
2222
```
@@ -27,7 +27,7 @@ Name | Description
2727
`acceptor_keytab_filepath` | The path to the `keytab` file, which contains the principal that the Security plugin uses to issue requests through Kerberos.
2828
`acceptor_principal` | The principal that the Security plugin uses to issue requests through Kerberos. This value must be present in the `keytab` file.
2929

30-
Due to security restrictions, the `keytab` file must be placed in `config` or a subdirectory, and the path in `opensearch.yml` must be relative, not absolute.
30+
Because of security restrictions, the `keytab` and `krb5.conf` files must be placed in the `config` directory or its subdirectory, and their paths in `opensearch.yml` must be relative, not absolute.
3131
{: .note }
3232

3333
## Cluster security configuration

0 commit comments

Comments
 (0)