[8075] in Kerberos
Re: kadmind4
daemon@ATHENA.MIT.EDU (Barry Jaspan)
Fri Sep 20 15:43:03 1996
Date: Fri, 20 Sep 1996 15:26:00 -0400
From: "Barry Jaspan" <bjaspan@MIT.EDU>
To: Dave McGuire <mcguire@neurotica.com>
Cc: Sam Hartman <hartmans@MIT.EDU>, kerberos@MIT.EDU
In-Reply-To: [8074]
Do you think it'd
be possible for me to build the old beta6 v4kadmind (which worked
fine) to manipulate the beta7 database?
I don't recommend it. v4kadmind does not know about the new kadm5
database, nor will it enforce whatever policies are configured via
kadm5. If v4kadmind deletes a principal that is assigned to a kadm5
principal, the kadm5 database will become inconsistent.
If you have locally modified v4kadmind, then presumably you have some
programmers that are familiar with it. kadm5's V4 compat server,
which currently only supports password changing, is based on the same
source code (most of it is just #ifdef'ed out). Why not just finish
the task of updating it to support the other V4 kadmin requests?
That's on our to-do list here but we haven't gotten to it. All the
documentation you need to write kadm5 programs is included in beta 7.
Barry
