In 2.9, we default to HPSS_PRIMARY_AUTHENTICATOR which is likely the main admin keytab containing all administrative accounts. If the admin wants to use a different keytab (ie for improved security, maybe), they can specify a keytab file containing only the single hpssftp entry.
So the second-choice default should be /var/hpss/etc/hpssftp.keytab. Update this in the documentation and data/gridftp_hpss_dsi.conf.
In 2.9, we default to
HPSS_PRIMARY_AUTHENTICATOR
which is likely the main admin keytab containing all administrative accounts. If the admin wants to use a different keytab (ie for improved security, maybe), they can specify a keytab file containing only the singlehpssftp
entry.So the second-choice default should be
/var/hpss/etc/hpssftp.keytab
. Update this in the documentation and data/gridftp_hpss_dsi.conf.