<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2600.0" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Hi Monica,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>as far as i understood it, changes in krb5.conf
take affect immediatly. This is a Client side konfiguration file, which is used
by kinit and other "kerberized" applikations.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>You can make a dump of the slave kdc manually and
load it in the master kdc by hand. This is no problem. Even creating a new
master kdc is possible. Maybe you have to create the kadmin-keytabs and the
stash-file again, but that is no problem.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Kerberos uses the system time. so you need to have
an external way to get your system times synchronised, like an
ntp-server.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Klaas</FONT></DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=mllau2002@yahoo.com href="mailto:mllau2002@yahoo.com">Monica Lau</A>
</DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=kerberos@mit.edu
href="mailto:kerberos@mit.edu">kerberos@mit.edu</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Monday, July 29, 2002 7:12 PM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> Few quick questions</DIV>
<DIV><FONT face=Arial size=2></FONT><FONT face=Arial size=2></FONT><BR></DIV>
<P>Hi all,
<P>I'm very new to Kerberos, and I have some general questions below.
Any suggestions is greatly appreciated. Thanks for your time and help!
<P>1. In the krb5.conf file, I can specify the clock skew and ticket lifetime
times. If I want to change these values after the kdc is already
running, do I need to restart the kdc? Ithere some way that the kdc
would read these values dynamically and take note of these changes?
<P>2. Can slave KDC propagate its database back to the master KDC? Let's
say that the master KDC goes down and the administrator makes changes to
the slave KDC database. Now before we restart the master KDC,
we want to update its database with the changes. Is it possible for
slave KDC to propagate its database back to master? </P>
<P>3. How do I set the KDC time? Is there some kadmin options to do
this?</P>
<P>Thanks,</P>
<P>Monica</P>
<P><BR>
<HR SIZE=1>
<B>Do You Yahoo!?</B><BR><A href="http://health.yahoo.com/">Yahoo! Health</A>
- Feel better, live better</BLOCKQUOTE></BODY></HTML>