[33683] in Kerberos
Re: Changing master key (Kerberos authentication server+LDAP database)
daemon@ATHENA.MIT.EDU (Sonja Benz)
Thu Jul 28 02:00:36 2011
In-Reply-To: <1311791694.19717.261.camel@willson.li.ssimo.org>
To: Simo Sorce <simo@redhat.com>
MIME-Version: 1.0
From: Sonja Benz <sonja.benz@de.ibm.com>
Message-ID: <OF67E8C935.D309B133-ONC12578DB.001D3FAE-C12578DB.0020F6D2@de.ibm.com>
Date: Thu, 28 Jul 2011 08:00:03 +0200
Cc: kerberos@mit.edu, kerberos-bounces@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
May be this link is a good starting point:
http://www.ibm.com/developerworks/aix/library/au-nasmasterldap/index.html
Sonja
From:
Simo Sorce <simo@redhat.com>
To:
Anubha Gupta <anuafs84@gmail.com>
Cc:
kerberos@mit.edu
Date:
07/27/2011 09:24 PM
Subject:
Re: Changing master key (Kerberos authentication server+LDAP database)
Sent by:
kerberos-bounces@mit.edu
On Wed, 2011-07-27 at 23:53 +0530, Anubha Gupta wrote:
> Thank for the reply, Simo. But I don't see any stash file on my
> system. I'm using AIX Network Authentication Sevice (NAS, which is
> mapped to MIT Kerberos 1.6.3) as the authentication server and IBM DB2
> LDAP as the database server. I need to re-encrypt the database with a
> new master key, but I can't see a stash file on my system. I'm
> assuming the master key is stored on LDAP, not sure though. Any
> suggestions?
THe MIT schema has also the attribute krbMkey defined, where
implementors can put the actual master keys instead of using the stash
file. IIRc this is not used by the standard ldap driver but I guess AIX
may have custom modifications.
You may have more luck asking IBM I guess :)
Simo.
--
Simo Sorce * Red Hat, Inc * New York
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
