[OpenAFS] Re: rxk error: caller not authorized

Derrick J Brashear shadow@dementia.org
Sun, 25 Apr 2004 10:10:53 -0400 (EDT)


On Sun, 25 Apr 2004, Christian Ospelkaus wrote:

> I don't know if MIT gives you that option, but under heimdal, you can do the
> following: using kadmin's dump -d command, you can dump the whole database
> into a text file in a human-readable form. You can then delete all lines
> except the afs principal from the file, change the name of the principal in
> the one remaining line and import it back into the database using kadmin's
> merge command. Then you have both the afs and the afs/cell principals with
> identical keys. You don't need to mess with your fileservers. Experts, is it

Even if you rename it, your fileservers don't care.

Having both keys in the KDC is fine.