[22289] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Migrating database between architectures: "Stored master key is

daemon@ATHENA.MIT.EDU (Tillman Hodgson)
Thu Aug 26 17:48:12 2004

Date: Thu, 26 Aug 2004 15:44:30 -0600
From: Tillman Hodgson <tillman@seekingfire.com>
To: kerberos@mit.edu
Message-ID: <20040826214430.GF22622@seekingfire.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <tslvff5prk7.fsf@cz.mit.edu>
Errors-To: kerberos-bounces@mit.edu

On Thu, Aug 26, 2004 at 04:34:00PM -0400, Sam Hartman wrote:
> The stash file is byte order dependent.  This is painfully stupid, but
> none the less true.

At least it's fairly obvious -- my first guess as to the cause was
actually right ;-)

> If you know your master passwerd you can run kdb5_util stash again.  

Hmmm. That solves the problem for /one/ of the realms ...

> If not, you can swap around the bytes of the key length in your
> favorite binary file editor.

For anyone else digging through the archives (Hello groups.google.com!),
it's bytes 3 through 6. Change CDAB to ABCD (metaphorically speaking)
using something like `vim -b`. Additionally, I had to swap bytes 1 and
2 (the keytype). More details in src/lib/kdb/fetch_mkey.c.

I haven't done any real testing of it, but krb5kdc starts without errors
now.

Thanks,

-T


-- 
When you ask a question, do you truly want to know the answer, or are you 
merely flaunting your power?
	- Dmitri Harkonnen, Notes to My Sons
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post