>>>>> "Nicolas" == Nicolas Williams <[EMAIL PROTECTED]> writes:
Nicolas> Does the other stash file exist? And is it a stash file?
>> tuzjfi:~/papadoc# kdb5_util load -update -verbose -mkey_convert -new_mkey_file
stash krb5-20020521
The file 'stash' here is the stash file from papadoc (copied over with scp).
the 'krb5-20020521' file is the dump from papadoc (sans the K/M, kadmin/*
and krbtgt principals).
Nicolas> What if you leave out the -new_mkey_file option? It
Nicolas> should prompt you for the new master key passphrase. --
Same thing...
Oki, so what did I miss?
The 'stash' file contain the password for the principal 'K/M', which is
used to unlock the database (by the KDC/Admin server when they start).
Right?
The new database have a new K/M (and new kadmin/* and krbtgt principals).
What should I do, just copy the database files and the stash file over?
--
Ortega attack Mossad cryptographic FSF subway World Trade Center
Semtex jihad Cocaine bomb Saddam Hussein Ft. Meade
counter-intelligence Kennedy
[See http://www.aclu.org/echelonwatch/index.html for more about this]
________________________________________________
Kerberos mailing list [EMAIL PROTECTED]
http://mailman.mit.edu/mailman/listinfo/kerberos