Kerberos Digest, Vol 19, Issue 9

[Henry B. Hotz]

I don't think it's off-topic, but heimdal questions may get better  
answers from heimdal-discuss at sics.se.

This is a bit theoretical for me, but I think you will need to dump the  
database, upgrade the server (which may use a different backend db  
utility, even if the db hasn't changed), and then restore the database.  
  All principals should remain intact and tickets issued under one  
version should generally work with the other one.

If you have multiple servers then you should be able to avoid service  
interruption if you upgrade them one at a time.  I wouldn't guarantee  
that you can mix/match hprop/hpropd between versions (though it might  
work).

As someone else wrote you are best off if you set up some test servers  
and try the specific upgrade scenario you want to use.

On Jul 7, 2004, at 7:50 AM, kerberos-request at mit.edu wrote:

> Date: Mon, 05 Jul 2004 15:07:55 -0500
> From: Chris Schadl <cschadl at satan.blah.org.uk>
> To: kerberos at MIT.EDU
> Subject: Upgrading from Heimdal 0.4 to 0.6
> Message-ID: <pan.2004.07.05.20.07.54.189206 at satan.blah.org.uk>
> Precedence: list
> Message: 5
>
> Apologies in advance if this is off-topic.
>
> I'm going to be upgrading my kerberos clients and KDC from heimdal  
> version
> 0.4e to 0.6.2.  I was wondering if I will need to do anyting like
> re-create or modify my existing principals created under 0.4, and I was
> also wondering if the 0.6.2 clients (which will be the first to be
> upgraded) will still be able to authenticate against the 0.4e KDC  
> during
> the transition period.
>
> Thanks,
>
> Chris Schadl
>
------------------------------------------------------------------------ 
----
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz at jpl.nasa.gov, or hbhotz at oxy.edu