[OpenAFS] Re: Moving Magic Trio to another domain

Russ Allbery rra@stanford.edu
Tue, 24 Sep 2013 15:30:52 -0700


Andrew Deason <adeason@sinenomine.net> writes:

> You need to extract the keys from the KDC to let the openafs servers
> know about it, using 'ktadd' from kadmin. In the past with DES keys, you
> used 'asetkey' to add the key to the KeyFile. With non-DES keys, you can
> just use the extracted keytab directly, if you put it in
> /usr/afs/etc/rxkad.keytab, or whatever the equivalent is on Ubuntu.

/etc/openafs/server/rxkad.keytab

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>