[37138] in Kerberos
Re: kpropd issue when upgrading from 1.8.2 to 1.13.2
daemon@ATHENA.MIT.EDU (John Devitofranceschi)
Tue Jun 30 16:51:48 2015
Date: Tue, 30 Jun 2015 16:51:33 -0400
From: John Devitofranceschi <jdvf@optonline.net>
In-reply-to: <5592CA37.5080308@mit.edu>
To: Greg Hudson <ghudson@mit.edu>
Message-id: <6C64B629-B46A-438F-AB2E-7D7764173F48@optonline.net>
MIME-version: 1.0
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="utf-8"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
> On Jun 30, 2015, at 12:56 PM, Greg Hudson <ghudson@mit.edu> wrote:
>
> On 06/27/2015 02:18 AM, John Devitofranceschi wrote:
>> It seems that the 1.8.2 dump file claims to be ipropx, but it still only has the old-style policy records and that makes the 1.13.2 kpropd’s resync fail when kdb5_util is loading the kdb.
>
> It looks like we messed up when adding the 1.11 policy extensions, and
> did not preserve iprop dump format compatibility. I have filed an issue
> here:
>
> http://krbdev.mit.edu/rt/Ticket/Display.html?id=8213
>
>> Are there any other possible work-arounds that don’t involve recompiling?
>
> I don't believe so. We can retroactively add compatibility with
> pre-1.11 iprop dump files, but that would require recompiling (or
> upgrading to some future version).
Okay, I’ll just continue to use my kdb5_util wrapper on our upgraded slaves until our master is upgraded and then revert to the unwrapped kdb5_util binary everywhere.
Thanks for the info.
jd
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
