Objective: Use Apache/mod_auth_kerb using a custom krb5.conf file, not system standard
Issue: I've got a strongly regimented environment where we application owners are able to configure apache instances within their assigned directories, but the baseline configuration (OS and Apache core) are maintained by a separate group. As such, any changes I make to core config such as
/etc/krb5.conf will mean replicating change to thousands of servers (risk+) or scripting a custom system configuration for this server (risk+,$+).
Model for success: In order to invoke
kinit to test or
ktutil to generate keytab files for use by Apache in this environment, overloading the
KRB5_CONFIG environmental variable (discussed in StackOverflow:pass kinit a custom krb5.conf file)
Question: Is there anyway to specify either the
KRB5_CONFIG environmental variable for Apache or force mod_auth_kerb to use another configuration?
Failed Attempts: I've tried running the same
env command on the apachectl restart. Apache Directive SetEnv was overlooked as it applies to script execution based on user requests, not to Apache 'backoffice' functions.