document KRB5_CLIENT_KTNAME

diff --git a/raddb/radiusd.conf.in b/raddb/radiusd.conf.in
index e0ca1d7d45af628453b7a4af6894054ccf7c3043..7e9346d26536c432a52e27d8c9cf8993225ee70b 100644 (file)
--- a/raddb/radiusd.conf.in
+++ b/raddb/radiusd.conf.in
@@ -354,6 +354,15 @@ ENV {
        #
 #      BAR
 
+       #
+       #  If the server needs kerberos credentials, then they can be placed
+       #  into the following keytab file.
+       #
+       #  This also permits the server to use those credentials when it is
+       #  run in debug mode.
+       #
+#      KRB5_CLIENT_KTNAME = ${raddbdir}/radiusd.keytab
+
        #
        #  `LD_PRELOAD` is special.  It is normally set before the
        #  application runs, and is interpreted by the dynamic linker.