[33631] in Kerberos

home help back first fref pref prev next nref lref last post

Re: keytab, kvno, ktadd, and existing tickets

daemon@ATHENA.MIT.EDU (Russ Allbery)
Sat Jul 23 04:14:53 2011

From: Russ Allbery <rra@stanford.edu>
To: "kerberos\@mit.edu" <kerberos@mit.edu>
In-Reply-To: <4E2A800E.6060702@d6.com> (Chris Hecker's message of "Sat, 23 Jul
	2011 01:02:22 -0700")
Date: Sat, 23 Jul 2011 01:14:44 -0700
Message-ID: <8762mts9aj.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Chris Hecker <checker@d6.com> writes:

> That makes sense.

> Maybe I add ktexport only when building as kadmin.local as a compromise.

That's already there.  :)  It's the -norandkey option to ktadd in
kadmin.local.

> If I was in there modifying kadmin.local, I'd also fix the message that 
> says it's "Authenticating as principal root/admin@BLAH.COM with 
> password." which is not actually true, nor does that princ even exist in 
> my kdc.  :)

Yeah, that's always been weird.

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post