[OpenAFS] Kerberos 5 Master key.

Derek Atkins warlord@MIT.EDU
30 Sep 2002 11:16:39 -0400


Daniel Sw=E4rd <excds@kth.se> writes:

> On Mon, 2002-09-30 at 16:55, Derek Atkins wrote:
> > Did you want to change the key or change the name?  Changing the key
> > is relatively easy.  Changing the Master Key can be done online
> > (although everyone needs to 'kinit' after you do this).  Changing the
> > AFS key can be done by just extracting a new keytab from the kasmin
> > interface, and then running asetkey to install the new key.
>=20
> Not the name, changing the master key/password is what I want to do.
>=20
> How do I then change both master key and the AFS key?

You can just change the master key like you would any other key.
The major problem with changing the master key is that all
outstanding TGTs will immediately become invalid.

I already told you how to change the AFS key.. Read above.

> (The reason I want to change it is that I can't remember what the
> password was. Might as well be foobar :-)) ... )

Fair enough.

-derek

--=20
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available