Package: krb5-kdc Version: 1.15-1+deb9u1 Severity: important Hi, The default log location for krb5-kdc is /var/log/krb5kdc.log . E.g. using the kdc.conf.template supplied with the package would cause krb5kdc to log to /var/log/krb5kdc.log However, this is not allowed by systemd's ReadWriteDirectories:
from /lib/systemd/system/krb5-kdc.service : ReadWriteDirectories=-/var/tmp /tmp /var/lib/krb5kdc -/var/run /run Thanks for your time! C. -- System Information: Debian Release: 9.2 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 4.9.0-4-amd64 (SMP w/1 CPU core) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages krb5-kdc depends on: ii debconf [debconf-2.0] 1.5.61 ii init-system-helpers 1.48 ii krb5-config 2.6 ii krb5-user 1.15-1+deb9u1 ii libc6 2.24-11+deb9u1 ii libcomerr2 1.43.4-2 ii libgssapi-krb5-2 1.15-1+deb9u1 ii libgssrpc4 1.15-1+deb9u1 ii libk5crypto3 1.15-1+deb9u1 ii libkadm5clnt-mit11 1.15-1+deb9u1 ii libkadm5srv-mit11 1.15-1+deb9u1 ii libkdb5-8 1.15-1+deb9u1 ii libkeyutils1 1.5.9-9 ii libkrb5-3 1.15-1+deb9u1 ii libkrb5support0 1.15-1+deb9u1 ii libverto-libev1 0.2.4-2.1 ii libverto1 0.2.4-2.1 ii lsb-base 9.20161125 krb5-kdc recommends no packages. Versions of packages krb5-kdc suggests: pn krb5-admin-server <none> pn krb5-kdc-ldap <none> pn krb5-kpropd <none> -- debconf information: krb5-kdc/debconf: true krb5-kdc/purge_data_too: false
