|
|
|
|
|
|
|
|
|
|
|
|
| home | help | back | first | fref | pref | prev | next | nref | lref | last | post |
Date: Mon, 05 Sep 2005 17:56:15 -0400 From: Jeffrey Hutzelman <jhutz@cmu.edu> To: Yeechang Lee <ylee@pobox.com>, kerberos@mit.edu Message-ID: <1045121565C51418404587E1@bistromath.pc.cs.cmu.edu> In-Reply-To: <slrndhlf4h.5ut.ylee@pobox.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline cc: Jeffrey Hutzelman <jhutz@cmu.edu> Errors-To: kerberos-bounces@mit.edu On Sunday, September 04, 2005 09:21:21 +0000 Yeechang Lee <ylee@pobox.com> wrote: > /usr/kerberos/sbin/kprop: Password has expired while getting > initial ticket I believe the principal you're looking for is kprop/fqdn.of.master.kdc You should probably arrange for it not to have a password expiration policy. If you're really paranoid, you chould change it manually once in a while, but I don't think I know anyone _that_ paranoid. > On a separate note, when looking through the list of principals, I > noted a mysterious K/M@EXAMPLE.COM I don't remember creating. Based on > > Last modified: Thu Feb 24 21:04:42 PST 2005 > (db_creation@EXAMPLE.COM) That principal corresponds to the master key, which is used to encrypt keys stored in the database. It's the same master key that you have to enter (or provide in a stash file) to get the KDC to start up. -- Jeffrey T. Hutzelman (N3NHS) <jhutz+@cmu.edu> Sr. Research Systems Programmer School of Computer Science - Research Computing Facility Carnegie Mellon University - Pittsburgh, PA ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
|
|
|
|
|
|
|
|
|
|
|
|
| home | help | back | first | fref | pref | prev | next | nref | lref | last | post |