[OpenAFS] Re: Moving Magic Trio to another domain

Russ Allbery rra@stanford.edu
Tue, 24 Sep 2013 15:30:52 -0700

Andrew Deason <adeason@sinenomine.net> writes:

> You need to extract the keys from the KDC to let the openafs servers
> know about it, using 'ktadd' from kadmin. In the past with DES keys, you
> used 'asetkey' to add the key to the KeyFile. With non-DES keys, you can
> just use the extracted keytab directly, if you put it in
> /usr/afs/etc/rxkad.keytab, or whatever the equivalent is on Ubuntu.


Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>