document KRB5_CLIENT_KTNAME

diff --git a/raddb/radiusd.conf.in b/raddb/radiusd.conf.in
index 366dce419dee0e4ab8ea47351f6f2953bcba2899..5a521cb4f48b2aaedea63228bc3afcdaa8423c52 100644 (file)
--- a/raddb/radiusd.conf.in
+++ b/raddb/radiusd.conf.in
@@ -424,6 +424,16 @@ ENV {
        #
 #      BAR
 
+
+       #
+       #  If the server needs kerberos credentials, then they can be placed
+       #  into the following keytab file.
+       #
+       #  This also permits the server to use those credentials when it is
+       #  run in debug mode.
+       #
+#      KRB5_CLIENT_KTNAME = ${raddbdir}/radiusd.keytab
+
        #
        #  `LD_PRELOAD` is special.  It is normally set before the
        #  application runs, and is interpreted by the dynamic linker.