[4477] in Kerberos
Re: DCE / Kerberos Comparison
daemon@ATHENA.MIT.EDU (Joseph N. Pato)
Tue Jan 10 17:31:26 1995
Date: Tue, 10 Jan 1995 17:11:08 -0500
To: rsalz@osf.org (Rich Salz)
From: pato@apollo.hp.com (Joseph N. Pato)
Cc: kerberos@MIT.EDU
At 12:15 1/10/95, Rich Salz wrote:
>In <3euaq7$piv@pad-thai.cam.ov.com> jik@cam.ov.com (Jonathan I. Kamens) writes:
>> you're going to
>>either have to invest a lot of effort into figuring out how to import your MIT
>>Kerberos database into the DCE Security system (not a small feat),
>
>Not terribly difficult. Dump your kerberos database out in ASCII.
>Massage that into /etc/passwd format. Use password_import. (This might
>lose the passwords, I think, which implies the "flag day" Jonathan
>mentioned.)
>
>You might look at sec_salvage_db; it can dump the DCE database into ascii,
>and writing a script to convert between the two ascii formats shouldn't be
>very difficult.
> /r$
There is an API for creating principals in the DCE database. It is pretty
easy to write a filter from the MIT ASCII dump that calls this API that
creates the DCE database (and you won't lose keys.)
- Joe Pato
Hewlett-Packard Co.
pato@ch.hp.com
+1 (508) 436-4350; FAX +1 (508) 436-5140
