Ah yes, the errors have been in the /var/log/syslog. Actually there is more than one FILE statement in krb5.conf.
My (wrongly made) assumption was that these are default log paths, whereas they came from another package (freeipa-server). So that means actually it is not a bug of the krb5 package, but of the freeipa package that misses the modification of the unit.file. Sorry for that ** Changed in: krb5 (Ubuntu) Status: Incomplete => Invalid -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to krb5 in Ubuntu. https://bugs.launchpad.net/bugs/1736596 Title: krb5kdc/kadmind miss /var/log inside ReadWriteDirectories in sytemd unit files Status in krb5 package in Ubuntu: Invalid Bug description: I am running: - Ubuntu 17.10 - krb5-kdc 1.15.1-2 - krb5-admin-server 1.15.1-2 The following files both miss an entry in the parameter ReadWriteDirectories: /lib/systemd/system/krb5-kdc.service /lib/systemd/system/krb5-admin-server.service This yields in the following error messages: Couldn't open log file /var/log/krb5kdc.log: The filesystem is read only To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/1736596/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp