[577] in Info-AFS_Redistribution
Re: Changing cell names
daemon@ATHENA.MIT.EDU (Jeanette_Dravk@transarc.com)
Wed Feb 5 17:28:47 1992
Date: Wed, 5 Feb 1992 15:17:47 -0500 (EST)
From: Jeanette_Dravk@transarc.com
To: Info-AFS@transarc.com, d3f082@maddog.pnl.gov
Cc: ta_harper@pnlg.pnl.gov
In-Reply-To: <9202050224.AA02848@maddog.pnl.gov>
Tom-
According to the Sytem Administrator's Guide (pg. 2-8):
"if the cell name ever changes, a system administrator must change every
entry in the Authentication Database to force the Authentication Server to
generate a new encryption key using the new cell name. The ThisCell and
CellServDB files on every file server and client machine must change."
This works out to the following steps:
Change the cell name in ThisCell and CellServDB on every machine in the cell.
-you can do an 'fs newcell' to avoid rebooting the machines.
Restart the servers the server processes to pick up the new changes.
Change the KeyFile on every file server and database server.
Change every user's password in the database so that it is encrypted (and
can thereafter be decrypted) properly.
As you can see, the biggest hassle is changing every user's password. It
can be done, and it's much easier the smaller your database is.
Jeanette-
