kdb5_util dump on host1 && kdb5_util load on host2

[Turbo Fredriksson]

>>>>> "Nicolas" == Nicolas Williams <Nicolas.Williams at ubsw.com> writes:

    Nicolas> Are you using different KDB master keys on the two hosts?
    Nicolas> That would explain the decrypt integrity check failure
    Nicolas> message from the KDC. If so then you must change the
    Nicolas> master key during dumping. There's a couple of
    Nicolas> undocumented options for this, -mkey_convert and
    Nicolas> -new_mkey_file <stash filename>.

Either I miss understood you, or it's not available in my version...

----- s n i p -----
tuzjfi:~/papadoc# kdb5_util load -update -verbose -mkey_convert -new_mkey_file stash krb5-20020521
Usage: kdb5_util cmd [-r realm] [-d dbname] [-k mkeytype] [-M mkeyname]
                 [-m] [cmd options]
        create  [-s]
        destroy [-f]
        stash   [-f keyfile]
        dump    [-old] [-ov] [-b6] [-verbose] [filename [princs...]]
        load    [-old] [-ov] [-b6] [-verbose] [-update] filename
        dump_v4 [filename]
        load_v4 [-t] [-n] [-v] [-K] [-s stashfile] inputfile
        ark     [-e etype_list] principal
tuzjfi:~/papadoc#
----- s n i p -----

This is MIT KerberosV v1.2.4 (Debian GNU/Linux sub version 5).
-- 
domestic disruption Semtex terrorist pits toluene genetic radar jihad
PLO Saddam Hussein Iran Waco, Texas Peking Mossad Marxist
[See http://www.aclu.org/echelonwatch/index.html for more about this]