[6011] in Kerberos
Re: Obtaining V4 compatibility from MIT V5 betat 5 server?
daemon@ATHENA.MIT.EDU (Sam Hartman)
Mon Oct 16 17:12:08 1995
To: epeisach@MIT.EDU
Cc: ldg@scott.skidmore.edu, kerberos@MIT.EDU
In-Reply-To: Your message of "Mon, 16 Oct 1995 15:59:03 EDT."
<9510161959.AA07935@kangaroo.mit.edu>
Date: Mon, 16 Oct 1995 17:01:02 EDT
From: Sam Hartman <hartmans@MIT.EDU>
>>>>> "epeisach" == epeisach <epeisach@MIT.EDU> writes:
epeisach> This may sound like a silly question, but when you
epeisach> create new keys in your database, what salt are you
epeisach> using? I forget if the default is compatible with v4 or
epeisach> not. (i.e. is it a v4 salt type).
I don't think the concept of salt type per say became a
user-visible concept until after beta-5. (Yes, it was important inside the code and in the protocol, but I don't think the user interface or documentation discussed it).
Basically, you need to use the av4k command to add a
v4-compatible key to th database. Also, it's important to make sure
that the ticket granting key (krbtgt/REALM@REALM) is a v4 key; if this
isn't the case, use the v4 change password command in kdb5_edit to
change the password of this key.
--Sam
epeisach> Ezra
