[OpenAFS] Re: Moving Magic Trio to another domain
Russ Allbery
rra@stanford.edu
Tue, 24 Sep 2013 15:30:52 -0700
Andrew Deason <adeason@sinenomine.net> writes:
> You need to extract the keys from the KDC to let the openafs servers
> know about it, using 'ktadd' from kadmin. In the past with DES keys, you
> used 'asetkey' to add the key to the KeyFile. With non-DES keys, you can
> just use the extracted keytab directly, if you put it in
> /usr/afs/etc/rxkad.keytab, or whatever the equivalent is on Ubuntu.
/etc/openafs/server/rxkad.keytab
--
Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>