Having seen all you guy's reaction to my question on changing the Cell
domain name
I understand that the passwords in the kas DB are the main issue.
So I now would like to test (on you) the following scenario
- Before that unholy day of change
"freese the cell", make backups and create a good listing of all
the user-ids in the
kas DB.
- shutdown AFS
- remove the kas DB files
- tell bos that the name of the cell has changed and do whatever is necessary
to match that on the servers configs (server and client CellServDB
and ThisCell)
ifconfig etc etc
now follow the AFS installation manual
- start bos etc without Authentication
- create the afs kas id
- create the admin id
- create all the other admin accounts, set the admin flag, add admins
to Userlist
- create some "test user accounts"
- bring the servers up in normal operational mode
- with a script re-create all the kas registrations as saved before all
this work started
using 'random' passwords
- inform the users that they each have to contact the admins to get/set
their passwd
(don't forget to change all the ThisCells and CellServDBs)
One obviously would need to test this on a seperate server.
Would this work?
Joop Verdoes
EPT - IS
Rijswijk
The Netherlands
