[1766] in Kerberos
Re: how to delete principal from dbase
daemon@ATHENA.MIT.EDU (Wayne Berke)
Tue Feb 25 04:15:37 1992
Date: 24 Feb 92 21:54:25 GMT
From: berke@shearson.com (Wayne Berke)
To: kerberos@shelby.Stanford.EDU
ywhui@ieug0.ie.cuhk.hk writes:
>Could anyone tell me how to delete principal from dbase? The kdb_edit
>provides us the way only to add principal.
>Thanks in advance.
>Regards,
>-------------------------------------------------------------------------------
>Maxi Y. W. Hui |
>Department of Information Engineering |Tel : (852) 609-7975
>The Chinese University of Hong Kong |Email : (Internet) ywhui@eng.ie.cuhk.hk
>Shatin, N.T. | (Internet) ywhui@ieug0.ie.cuhk.hk
>HONG KONG | (BITNET) B091711@CUCSC.BITNET
>-------------------------------------------------------------------------------
One of the major shortcomings of Kerberos 4.x is the non-support of deleting
either of database principals or of srvtab entries. We managed to solve the
latter problem by modifying the ksrvutil source to add the "delete" option.
However, the former problem still remains. Of course, you can always delete
principals by the standard:
1) disable the Kerberos admin server
2) "kdb_util dump /tmp/dump"
3) edit /tmp/dump to delete the principal
4) "kdb_util load /tmp/dump"
5) restart the Kerberos admin server
It would be real nice to be able to do this in one shot using kdb_edit or
more generally have a library routine that deletes principals so you could
build your own tools. Will this be supplied in K5?
Wayne Berke
berke@shearson.com : Internet
...!uunet!shearson.com!berke : UUCP
388 Greenwich St., 11th floor, NY NY 10013 : Snail
212-464-3351 : Office phone
