[564] in Kerberos
changing master key on database
daemon@TELECOM.MIT.EDU (John T Kohl)
Wed Jan 4 11:06:37 1989
From: John T Kohl <jtkohl@ATHENA.MIT.EDU>
To: kerberos@ATHENA.MIT.EDU
Is there any good reason to increment each principal's key version
number when changing the master key on the Kerberos database? kdb_util
currently increments both the key's version number and the key's idea of the
master key version number.
It seems to me that the key's version number should only change when the
key has changed, and not when the encrypted version of the key has
changed.
John
