Hi,

I started to roll out some Archlinux machines with OpenLDAP and Kerberos on top and added some features to the init scripts that allow the following:

- Own ticket cache for slapd (required for syncrepl connections)
* environment settings to use own cache
* automatic setup on startup
* automatic destroy on shutdown
* automatic renewal of tickets
* array holding the principals that should be renewed
* File permissions to be set after the cache has been updated
* cron script that runs hourly and updates the tickets/principals

- Own keytab for slapd required for service authentication
* environment settings to use own keytab
* check for right file permissions on startup/restart

Basically most of the stuff is done inside the rc.d script of slapd and /etc/conf.d/slapd. Only the cron script is added so that an hourly update of the tickets is possible.

If you're interested in the changes, just let me know and I file you a patch.

KR,

Oliver