[5334] in Kerberos
Kerb V4-> Kerb V5 -> DCE Key Conversion?
daemon@ATHENA.MIT.EDU (Nik Conwell)
Wed Jun 7 07:21:44 1995
To: kerberos@MIT.EDU
Date: 7 Jun 1995 10:56:36 GMT
From: nik@bu.edu (Nik Conwell)
Regarding the migratability (V4->V5->DCE) of kerberos key strings:
We're considering some form of global password space. We're a little queasy
with the idea of picking one solution without knowing what our conversion
possibilities are.
The Kerberos FAQ (04/13/1995) indicates that Kerberos version 5 comes with a
program to convert a version 4 database to version 5. Does this include the
keys or would we have to select all new passwords? Would it be possible now,
to save off just version 4 keys (and their associated login names) whenever we
do a unix password change, and then convert that information into a version 4
(or 5) database at a later date?
How about DCE? It can serve a Kerberos V5 client. Is there a program to
convert a Kerberos version 5 database to a DCE database? Again, if we just
saved off the V5 keys (and login names), would it be possible to create a
database?
Thanks in advance for any help you can give me.
-nik
--
Nik Conwell Boston University nik@bu.edu
