[3401] in Kerberos
Re: removing users from the kerberos database
daemon@ATHENA.MIT.EDU (Phi H Truong)
Mon Jun 13 23:40:08 1994
To: kerberos@MIT.EDU
Date: 14 Jun 1994 02:50:43 GMT
From: orion@iastate.edu (Phi H Truong)
Reply-To: orion@iastate.edu (Phi H Truong)
In article <1994Jun13.201800.16949@pony.ingres.com>,
Sid Shapiro <sid@Ingres.COM> wrote:
>
>Hi folks,
>
>Pardon me for asking what will may turn out to be a simple question,
>but I'm trying to figure out how to remove users from the kerberos db.
>I see no utility that can do it, so I'm left with changing the
>expiration date from within kdb_edit. I have no idea if this will
>actually remove the user.
>
If you are using kerberos IV then you are somewhat out of luck. There
isn't a facility to remove principals except for a rough kind of way.
1. use kdb_util and dump the database
2. use your favorite editor and remove the principals
3. use kdb_util to upload the database
or you could create a program based on kdb_util, kdb_edit, ext_srvtab,
... etc, to do the removing (use this program on master kerberos only).
This is left as an exercise for the reader. :)
--
_____
Phi H. Truong "Hmmmmmmmm....... "
orion@iastate.edu ISU Computation Center
Systems Analyst 237 Durham Center ph: (515) 294 -1420
