[OpenAFS] Re: SuSe 9.0 &Heimdal.6

Derrick J Brashear shadow@dementia.org
Sun, 28 Dec 2003 01:35:28 -0500 (EST)


On Sat, 27 Dec 2003, ted creedon wrote:

> Does "no salt" mean the keynames are listed des-cbc-crc() rather than
> des-cbc-crc(pw-salt) or des-cbc-crc(afs3-salt(tedcell))?

correct

>
> On Sat, 27 Dec 2003, ted creedon wrote:
>
> >
> > Kadmin> list -l afs@TED-DORIS.FAM
> >
> > Indicates renaming is changing the salt from TED-DORIS.FAM to
> > TED-DORIS.FAMafs to TED-DORIS.FAMafstedcell
>
> oh. maybe you should give up on the importing kaserver database, because
> this is another sign of something gone wrong: an option to hprop was
> supposed to indicate DES string to key, e.g. "no salt"
>
>
> > Sounds to me like the general idea is to be able to run kaserver to set up
> > the afs domain in /etc/opanafs/server/KeyFile and import it into
> > /etc/krb5.keytab
>
> fileserver/bosserver/vlserver/et al don't read krb5.keytab.
>
>
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info
>