[1471] in Kerberos_V5_Development
Re: extracting keytab without changing key
daemon@ATHENA.MIT.EDU (Barry Jaspan)
Thu Aug 1 19:46:16 1996
Date: Thu, 1 Aug 96 19:45:50 -0400
From: "Barry Jaspan" <bjaspan@MIT.EDU>
To: hartmans@MIT.EDU
Cc: krbcore@MIT.EDU
In-Reply-To: <199608012319.TAA20876@tertius.mit.edu> (message from Sam Hartman
on Thu, 1 Aug 1996 19:19:26 -0400)
Before kdb5_edit goes away, another mechanism for extracting a
keytab without changing the key should be provided. There are enough
situations when this is useful...
Just for the record, please list some of them.
Note that kadm5_get_principal when invoked *on the server* can
retrieve a principal's keys. Thus, you could write an keytab
extraction program that runs on the server that does not change keys.
Barry
