[OpenAFS] Re: renaming a cell?

Russ Allbery rra@stanford.edu
Mon, 30 Apr 2012 08:22:17 -0700


Andrew Deason <adeason@sinenomine.net> writes:

> But if you're creating a new database or using new KDCs, etc, that's not
> a problem.

Yeah, that's how we did it.

> And even converting the existing database in-place may be possible; I
> don't really know. I may be incorrect on some of these details anyway,
> this is all pure krb5 stuff and not much to do with AFS :)

For the record, I believe Heimdal does have support for a fallback salt
that you can use to handle principals keyed in the wrong realm, but I'm
not sure exactly how it works and have never had to use it.

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>