[2175] in Kerberos-V5-bugs

home help back first fref pref prev next nref lref last post

Re: Documentation lacking questions.

daemon@ATHENA.MIT.EDU (Ken Hornstein)
Wed Aug 21 01:20:41 1996

To: "Randall S. Winchester" <rsw@glue.umd.edu>
Cc: krb5-bugs@MIT.EDU
In-Reply-To: Your message of "20 Aug 1996 13:45:04 EDT."
             <tslwwyugdb3.fsf@tertius.mit.edu> 
Date: Wed, 21 Aug 1996 01:20:22 -0400
From: Ken Hornstein <kenh@cmf.nrl.navy.mil>

>    Randall> However after I changed my password (with kdb_edit since
>    Randall> I can not get kadmind5 to run...) I was unable to
>    Randall> kinit. I got this;
>
>	O, yes, that's another thing about multiple encryption types
>in Beta 6: kadmin doesn't change passwords correctly--or at least, it
>doesn't preserve the supported_enctypes.

It's even worse than that - in some cases, it encrypts with one enctype,
but records it as another :-)

If you _really_ need it now, I can send you a couple of patches that makes
this work.  

BTW, this brings up an interesting question; when you change your password
with the new kadmind that's coming out, will you keep your old enctype,
or will you get converted to the supported_enctypes list?  If we've voting,
I vote for the latter :-)

--Ken

home help back first fref pref prev next nref lref last post