Subject: Re: [OpenAFS] asetkey complains about keylength. Date: Tue, Aug 31, 2010 at 02:02:52PM -0700 Quoting Russ Allbery ([email protected]): > Mans Nilsson <[email protected]> writes: > > > I'm setting up a new cell on Solaris, using self-built 1.4.12.1. My kdc > > is Heimdal. When trying to create a KeyFile from the ktutil-gotten file, > > asetkey complains that > > > Key length should be 8, but is really 1 > > Are you sure that the key you created is DES-only?
Not 100% positive, no. Will check this once I'm in position to reach the systems at work. > Also, if you're using Heimdal, you don't need asetkey (or aklog). Heimdal > comes with tools that can handle this. Use the Heimdal kadmin program's > ext_keytab command to create the keytab and give the filename as: > > AFSKEYFILE:/path/to/KeyFile > > and Heimdal can write out that format directly. I remember Harald performing such rituals now that you mention it. Thanks. > > asetkey and aklog were built after manually adding > > -I/usr/heimdal/include and -lkrb5 to compilation invocations, since the > > usual tricks did not work. > > This should be fixed in 1.5. Good. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46 705 989668 I want you to organize my PASTRY trays ... my TEA-TINS are gleaming in formation like a ROW of DRUM MAJORETTES -- please don't be FURIOUS with me --
pgphP3xnm2lt8.pgp
Description: PGP signature
