[1621] in Kerberos

home help back first fref pref prev next nref lref last post

Re: How to edit KDB

daemon@ATHENA.MIT.EDU (Marc Horowitz)
Fri Oct 18 08:13:41 1991

To: "Peter Lister, Cranfield Computer Centre" <CC012@cranfield.ac.uk>
Cc: kerberos@Athena.MIT.EDU
In-Reply-To: [1620] in Kerberos
Reply-To: Marc Horowitz <marc@MIT.EDU>
Date: Fri, 18 Oct 91 07:37:43 EDT
From: Marc Horowitz <marc@Athena.MIT.EDU>

>> Now here's a more difficult one. How do I correct or delete a bad
>> srvtab entry without rebuilding it with ext_srvtab (which gets only
>> those principals with single instance, and needs the master password)?
>> ksrvutil add appends a correct record, but this is never read if
>> there's a bad one already in there.

That's easy ;-)

ksrvutil hasn't always existed.  Before it did, we used emacs to edit
srvtab files if we needed to.  This can still be useful for extracting
a service key for a service which has its own srvtab file and doesn't
run as root (such as discuss).  The format is fairly straightforward:
<principal, instance, realm, key>, where principal, instance, and
realm are null-terminated strings, and key is eight bytes.  All the
entries in the file are just concatenated together.  cat -v
/etc/srvtab.  It will be pretty clear.

So, in your case, load the srvtab file, find the first occurrence of
the key (the corrupt one) and remove it.  Remember to
(setq require-final-newline 'nil).

		Marc

home help back first fref pref prev next nref lref last post