> Strangely, the upgrade documentation explicitly says to enable this > option after copying the KDC config… Maybe whoever wrote this part of > the upgrade guide should reinvestigate, I am with my Latin at the end.
Huh… what strikes me as odd is that kdc.conf_non-edu also has the option activated, despite the template in the krb5-kdc package having it commented out. In fact, the non-edu file was byte for byte identical. Maybe that's the missing piece, the non-edu file being created from the old edu version instead of the non-edu kdc.conf on upgrade for some reason? -nik -- Dominik George (1. Vorstandsvorsitzender, pädagogischer Leiter) Teckids e.V. — Digitale Freiheit mit Jugend und Bildung https://www.teckids.org/