Scott Dawson had some questions about how to migrate form the Kaserver
to Kerberos V5, and how the string to key effects the effort.
We are doing something very similar to what John Myers of CMU is
doing: He has modified the AFS kaserver and kas commands to use the
MIT string_to_key.
We don't have the AFS source, but instead have a modified version of
the Kerberos version 4 MIT kpasswd command which tries both the MIT
and AFS string_to_key routines. This replaces the AFS kpasswd command.
It communicates with a modified version of the MIT kadmind which is
running on the AFS server. It has been modified to issue the "kas
setkey" command to stuff the key into the AFS database. The MIT
kadmind has a dummy database, it issues kas commands as needed to
access the AFS kaservers database.
Since klog will accept either, it did not need to be modified.
Eventually, as all the users change their passwords they will all be
of the MIT form. This should help in a transition to Kerberos 5.
The updates to the MIT kadmind, and kpasswd are available via
anonymous FTP at achilles.ctd.anl.gov:pub/kerberos.v4 see the README
file there for more information.
Douglas E. Engert
Systems Programming
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439
(708) 252-5444
Internet: [EMAIL PROTECTED]
