[OpenAFS-Doc] new man page: bos_util

Jason Edgecombe jason@rampaginggeek.com
Fri, 17 Aug 2007 22:47:27 -0400


Russ Allbery wrote:
> Jason Edgecombe <jason@rampaginggeek.com> writes:
>
>   
>> Here is the second draft that includes your suggestions.
>>     
>
> I've applied this with some changes.  See below for my version, which can
> probably be further improved.
>
> I added more information about what's going on with salts.  The salt
> description that you had, based on Douglas Engert's message, is actually
> the Kerberos v5 salt algorithm, which isn't one of the salt algorithms
> that bos_util speaks.  bos_util supports either the traditional (and
> weirdly complex) AFS salt (:afs3 in MIT Kerberos parlance) or straight DES
> keys with no salt (:v4).  The relevant point from that message is that
> since the adddes function applies no salt at all, you can use it as a
> mechanism of last resort to generate a DES key by providing a pre-salted
> password as input.  Douglas's message doesn't explain exactly how to do
> that, just that it's possible, so I tried to incorporate the information
> from that message into the man page and removed the link to the message
> archive.
>
> I added some more comparisons to the bos commands and to the asetkey
> commands as well and reworded the pushing of people towards asetkey.
>
>   

It looks good to me. I was going out on a limb with bos_util. I wanted 
the page to have more meat and detail, but I couldn't find much info 
besides the one thread on the mailing list. Thankfully, you fleshed out 
the rest and corrected my guessing or bad info.

Jason