[OpenAFS-Doc] new man page: bos_util
Jason Edgecombe
jason@rampaginggeek.com
Fri, 17 Aug 2007 22:47:27 -0400
Russ Allbery wrote:
> Jason Edgecombe <jason@rampaginggeek.com> writes:
>
>
>> Here is the second draft that includes your suggestions.
>>
>
> I've applied this with some changes. See below for my version, which can
> probably be further improved.
>
> I added more information about what's going on with salts. The salt
> description that you had, based on Douglas Engert's message, is actually
> the Kerberos v5 salt algorithm, which isn't one of the salt algorithms
> that bos_util speaks. bos_util supports either the traditional (and
> weirdly complex) AFS salt (:afs3 in MIT Kerberos parlance) or straight DES
> keys with no salt (:v4). The relevant point from that message is that
> since the adddes function applies no salt at all, you can use it as a
> mechanism of last resort to generate a DES key by providing a pre-salted
> password as input. Douglas's message doesn't explain exactly how to do
> that, just that it's possible, so I tried to incorporate the information
> from that message into the man page and removed the link to the message
> archive.
>
> I added some more comparisons to the bos commands and to the asetkey
> commands as well and reworded the pushing of people towards asetkey.
>
>
It looks good to me. I was going out on a limb with bos_util. I wanted
the page to have more meat and detail, but I couldn't find much info
besides the one thread on the mailing list. Thankfully, you fleshed out
the rest and corrected my guessing or bad info.
Jason