[OpenAFS] service principal question

pod@herald.ox.ac.uk pod@herald.ox.ac.uk
Wed, 12 Oct 2005 19:46:48 +0100 (BST)


>>>>> "NN" == Neulinger, Nathan <nneul@umr.edu> writes:

    NN> You just need to remember to update kadm5.acl if you decide to use
    NN> a different name (assuming you're using mit k5), as the default
    NN> install of that I believe gives krb db admin rights for all princs
    NN> to */admin.

Only if you want the different name to have privs over the keys in the
KDC.

As far as AFS is concerned the name is irrelevant and the output of 'bos
listusers' and the entries in the PDB are what it is important.