Re: [OpenAFS] Re: 'afs/' principal rekeying instructions may be incomplete

2014-01-24 Thread Benjamin Kaduk
Sorry for the delayed response. It looks like Jeffrey's and Andrew's responses should have addressed the major issues. It would also be a little easier for me if the attribution of who wrote the quoted text was retained. On Thu, 23 Jan 2014, Peter Grandi wrote: ** Crucial details for

Re: [OpenAFS] Re: 'afs/' principal rekeying instructions may be incomplete

2014-01-23 Thread Jeffrey Altman
On 1/23/2014 2:18 PM, Peter Grandi wrote: [ ... ] results in the loss of the existing single-DES key from the KDB, That is intentional and expected. Perhaps it should be noted in the procedure then. I have noticed that the language in the procedure is somewhat ambiguous on keeping or