[33632] in Kerberos
Re: keytab, kvno, ktadd, and existing tickets
daemon@ATHENA.MIT.EDU (Chris Hecker)
Sat Jul 23 04:36:07 2011
Message-ID: <4E2A87ED.1010702@d6.com>
Date: Sat, 23 Jul 2011 01:35:57 -0700
From: Chris Hecker <checker@d6.com>
MIME-Version: 1.0
To: "kerberos@mit.edu" <kerberos@mit.edu>
In-Reply-To: <8762mts9aj.fsf@windlord.stanford.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
> That's already there. :) It's the -norandkey option to ktadd in
> kadmin.local.
I just switched to my mailer to say I looked at the 1.9.1 source to make
the mod and found -norandkey and was thinking "somebody is going to have
replied with 'it's already there'". :)
CentOS is still on 1.6.1 (!), so I don't have it on the server. I guess
I'll build latest there if I need it.
Thanks for putting up with all my noob questions and mails!
Chris
On 2011/07/23 01:14, Russ Allbery wrote:
> Chris Hecker<checker@d6.com> writes:
>
>> That makes sense.
>
>> Maybe I add ktexport only when building as kadmin.local as a compromise.
>
> That's already there. :) It's the -norandkey option to ktadd in
> kadmin.local.
>
>> If I was in there modifying kadmin.local, I'd also fix the message that
>> says it's "Authenticating as principal root/admin@BLAH.COM with
>> password." which is not actually true, nor does that princ even exist in
>> my kdc. :)
>
> Yeah, that's always been weird.
>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
