[7776] in Kerberos
Re: Mundane kerberos question: srvtab management
daemon@ATHENA.MIT.EDU (Wolfgang Rupprecht)
Thu Aug 15 01:23:20 1996
To: kerberos@MIT.EDU
Date: 14 Aug 1996 10:26:55 -0700
From: wolfgang@wsrcc.com (Wolfgang Rupprecht)
Mark Eichin <eichin@cygnus.com> writes:
>then they can either "rcp -x " the srvtab from somewhere [...]
I tried the 'rcp -x' hack after updating the *whole* v5svrtab for each
machine.
The problem is that there isn't an overlap between old and new keys.
Updating the keyserver's database files nukes any chance of getting a
mutually agreed upon service key for the rcp.
Perhaps I should have copied the whole database file, made new keys in
that one and then distributed the new svtab while the kdc was still
using the old database. Does anyone do this?
Or more fundamentally am I being silly to periodically "refresh" the
svtabs?
-wolfgang
--
Wolfgang Rupprecht <wolfgang@wsrcc.com> <http://www.wsrcc.com/>
PGP key available via finger, keyservers, and WWW
