[OpenAFS] heimdal, keyfiles, and bootup

Matthew J. Turk mturk@astro.psu.edu
Sun, 18 Apr 2004 18:01:42 -0400


> Exactly what commands did you use to generate the keyfile?

Apparantly the wrong ones...  I copied, using ktutil, the keys from the keytab 
file (where I had exported them) to /usr/afs/etc/KeyFile.  The command was:

# ktutil copy /etc/krb5.keytab /usr/afs/etc/KeyFile

but first I deleted all of the encryption types except des-cbc-crc.  Prior to 
this, I had imported the keys from the kaserver DB0 into my kdc, and 
generated a new principal for afs/cell@REALM.


mjt