[OpenAFS] OpenAFS + KRB5 usage...

[Derrick J Brashear]

On Fri, 27 Apr 2001, Charles Clancy wrote:

> Is there any [easy] way to migrate accounts from the kaserver to krb5?  I
> figure that since kaserver is basically krb4, there should be some sort of
> "upgrade" feature in krb5.  I've seen utilites that take kaserver.DB0 and
> convert it into an /etc/passwd format. 

That would be a neat trick. The passwords in kaserver.DB0 are DES keys,
not useful for /etc/passwd

>  Are the passwords stored
> consistently between krb4 and krb5?  Could that then be imported?  I just
> don't to avoid assigning new passwords for all the accounts currently on
> the system.

With MIT krb5, you need Ken Hornstein's migration kit, which includes
afs2k5db

With Heimdal, hprop can do it for you if you configured with
--enable-kaserver-db

-D