[OpenAFS-devel] hidden commands

Steven Jenkins steven.jenkins@gmail.com
Fri, 8 Jun 2007 12:56:16 -0400


------=_Part_46616_1550563.1181321776568
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

On 6/7/07, Marcus Watts <mdw@spam.ifs.umich.edu> wrote:
>
> ...




At umich.edu when we were running kaserver, we ran with "GETPASSWORD"
> enabled.  We used it so that we could rename principals -- ptserver has a
> rename option, but kaserver doesn't.  With special code running on the kdc
> though, we could fetch the key, save it, delete the old ka instance,
> create a new ka instance, and restore the user's key.  Since k4 keys
> didn't
> depend on the principal (only the cell), this worked.
>
...

Would removing the code from the src tree be the best option at this point?

Steven

------=_Part_46616_1550563.1181321776568
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

<br><br><div><span class="gmail_quote">On 6/7/07, <b class="gmail_sendername">Marcus Watts</b> &lt;<a href="mailto:mdw@spam.ifs.umich.edu">mdw@spam.ifs.umich.edu</a>&gt; wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
...</blockquote><div><br>&nbsp;</div><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">At <a href="http://umich.edu">umich.edu</a> when we were running kaserver, we ran with &quot;GETPASSWORD&quot;
<br>enabled.&nbsp;&nbsp;We used it so that we could rename principals -- ptserver has a<br>rename option, but kaserver doesn&#39;t.&nbsp;&nbsp;With special code running on the kdc<br>though, we could fetch the key, save it, delete the old ka instance,
<br>create a new ka instance, and restore the user&#39;s key.&nbsp;&nbsp;Since k4 keys didn&#39;t<br>depend on the principal (only the cell), this worked.<br></blockquote></div>...<br><br>Would removing the code from the src tree be the best option at this point? 
<br><br>Steven<br><br>

------=_Part_46616_1550563.1181321776568--