[16348] in Kerberos_V5_Development
Re: Removing old keys
daemon@ATHENA.MIT.EDU (Greg Hudson)
Mon Sep 20 16:33:41 2010
From: Greg Hudson <ghudson@mit.edu>
To: Tom Yu <tlyu@mit.edu>
In-Reply-To: <ldvsk14maz1.fsf@cathode-dark-space.mit.edu>
Date: Mon, 20 Sep 2010 16:32:56 -0400
Message-ID: <1285014776.20521.14.camel@ray>
Mime-Version: 1.0
Cc: "krbdev@mit.edu" <krbdev@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
On Mon, 2010-09-20 at 16:11 -0400, Tom Yu wrote:
> * delete all old kvnos
> * delete one specific kvno
> * something else
It may also be useful to be able to remove one or more key:salt types
from an existing kvno. For example, a site which is migrating away from
DES might want to (at some point in the process) remove all DES keys
without force-changing all passwords.
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
