upgrading from krb5-1.0b6 to krb5-1.2.5

Art Freeman art at art-freeman.com
Sun Aug 4 20:58:08 EDT 2002


Tom Yu writes:
tom>>>>>> "art" == Art Freeman <art at art-freeman.com> writes:

tom>art> Although there is a stash file krb5_util complains that the key
tom>art> is corrupted when I try to load the contents of the old database
tom>art> to the new one.

tom>Are you loading the new database on a machine having the opposite byte
tom>order from the old one?  If so, you should know that there are some
tom>integer fields in the stash file that need to be byte-swapped.

I don't believe the endianess is changing.  The old database exists on a sun4u (solaris 2.6)
system and the new database is a sun4u (solaris 8) system.  I believe that at one time the 
the database was migrated from sun4m (sunos 4.x) to sun4u (solaris 2.5.1 or 2.6) but I'm 
not certain.

tom>art> By the way, are there any plans to provide a function to change
tom>art> the database master key and change the principals appropriately?

tom>Master key change capability exists, but is buggy, in krb5-1.2.5.  The
tom>following patch should allow master key change to work:

Thanks.

tom>art> Do you have any suggestions as to which DES cracking tools would
tom>art> be useful?

tom>Not really.  The fastest DES cracking engine that is publically
tom>acknowledged was built from custom hardware.

Ok, but I was referring to a software set of tools.  






More information about the Kerberos mailing list