[OpenAFS] Server encryption keys

Ken Hornstein kenh@cmf.nrl.navy.mil
Tue, 20 Mar 2007 13:20:27 -0400


>On a test cell, I've been able to change the encryption key as
>follows: I change the afs password using kadmin and export it
>to the KeyFile.  I then have to kill the bos process and all
>server processes on all servers, since my old admin tokens
>don't work any more, nor do new ones when I reauthenticate.

I think you're doing something wrong here.  Assuming you don't get rid
of the old key in the KeyFile the old tokens should continue to work.

--Ken