[OpenAFS] Re: SuSe 9.0 &Heimdal.6

ted creedon tcreedon@easystreet.com
Sat, 27 Dec 2003 19:45:11 -0800


Does "no salt" mean the keynames are listed des-cbc-crc() rather than
des-cbc-crc(pw-salt) or des-cbc-crc(afs3-salt(tedcell))?

ted

-----Original Message-----
From: Derrick J Brashear [mailto:shadow@dementia.org]=20
Sent: Saturday, December 27, 2003 2:15 PM
To: ted creedon
Cc: openafs-info@openafs.org
Subject: RE: [OpenAFS] Re: SuSe 9.0 &Heimdal.6

On Sat, 27 Dec 2003, ted creedon wrote:

>
> Kadmin> list -l afs@TED-DORIS.FAM
>
> Indicates renaming is changing the salt from TED-DORIS.FAM to
> TED-DORIS.FAMafs to TED-DORIS.FAMafstedcell

oh. maybe you should give up on the importing kaserver database, because
this is another sign of something gone wrong: an option to hprop was
supposed to indicate DES string to key, e.g. "no salt"


> Sounds to me like the general idea is to be able to run kaserver to =
set up
> the afs domain in /etc/opanafs/server/KeyFile and import it into
> /etc/krb5.keytab

fileserver/bosserver/vlserver/et al don't read krb5.keytab.