[33682] in Kerberos
Re: Changing master key (Kerberos authentication server+LDAP database)
daemon@ATHENA.MIT.EDU (Simo Sorce)
Wed Jul 27 15:20:56 2011
From: Simo Sorce <simo@redhat.com>
To: Anubha Gupta <anuafs84@gmail.com>
In-Reply-To: <CAKavT-+TF1J6Py1vZ4LF5opWyva-M7bYv81hbkA_z=+bR8RTPg@mail.gmail.com>
Date: Wed, 27 Jul 2011 14:34:54 -0400
Message-ID: <1311791694.19717.261.camel@willson.li.ssimo.org>
Mime-Version: 1.0
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Wed, 2011-07-27 at 23:53 +0530, Anubha Gupta wrote:
> Thank for the reply, Simo. But I don't see any stash file on my
> system. I'm using AIX Network Authentication Sevice (NAS, which is
> mapped to MIT Kerberos 1.6.3) as the authentication server and IBM DB2
> LDAP as the database server. I need to re-encrypt the database with a
> new master key, but I can't see a stash file on my system. I'm
> assuming the master key is stored on LDAP, not sure though. Any
> suggestions?
THe MIT schema has also the attribute krbMkey defined, where
implementors can put the actual master keys instead of using the stash
file. IIRc this is not used by the standard ldap driver but I guess AIX
may have custom modifications.
You may have more luck asking IBM I guess :)
Simo.
--
Simo Sorce * Red Hat, Inc * New York
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
