Does kadmind work on a multi-realm KDC?

Garrett Wollman wollman at lcs.mit.edu
Wed Sep 3 16:52:52 EDT 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

We're migrating from an old realm name to a new one.  I staged the
setup of the new realm on the backup KDC, and kadmind worked fine
there, but once I moved everything over to the primary KDC, there did
not seem to be any way to make kadmind work for both realms
simultaneously.  I tried giving both realms on the command line, but
an inspection of the source code suggests that kadmind is very certain
about only being about to support one realm at a time.  I tried
starting two kadminds, one for each realm, specifying an alternate
port, but that didn't work either as there is no way to specify a
different changepw port on the command line.

What am I missing?  Any workarounds?  Is this fixed in the most recent
release?

- -GAWollman

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (FreeBSD)

iD8DBQE/VlSjI+eG6b7tlG4RAgwXAKCuCozNKZqwriNCXriD3djRX3PjXACdFXYc
EBrLDzDdjqXEbieVUQPqEyI=
=QRNa
-----END PGP SIGNATURE-----
-- 
Garrett A. Wollman   | As the Constitution endures, persons in every
wollman at lcs.mit.edu  | generation can invoke its principles in their own
Opinions not those of| search for greater freedom.
MIT, LCS, CRS, or NSA| - A. Kennedy, Lawrence v. Texas, 539 U.S. ___ (2003)


More information about the Kerberos mailing list