diff --git a/README.md b/README.md index 4130d98..0ecdc94 100644 --- a/README.md +++ b/README.md @@ -298,6 +298,6 @@ Restart-Service sshd kadmin.local -q "addprinc -randkey ldap/ldap.example.org@REALM" kadmin.local -q "ktadd -k /tmp/ldap.keytab ldap/ldap.example.org@REALM" ``` -2. Copy the keytab into the OpenLDAP container at `/etc/ldap/ldap.keytab`. -3. Set `KRB5_KTNAME=/etc/ldap/ldap.keytab` in the OpenLDAP container environment. +2. Copy the keytab into the OpenLDAP container at `/etc/krb5.keytab`. +3. Set `KRB5_KTNAME` if you have chosen to use a non-default keytab location in the OpenLDAP container environment. 4. Install `libsasl2-modules-gssapi-mit` in the OpenLDAP image and enable the `GSSAPI` SASL mechanism.