afs to k5 conversion keytypes
dopheide at ncsa.uiuc.edu
Mon Feb 21 17:35:40 EST 2005
To my knowledge there is no way to convert keys like you're wanting to do.
My suggestion, if it's possible in your environment, would be to implement
a password expiration policy with a deadline of a few months and let
everyone gradually change their password.
The inevitable problem with that is the thousands of users who fail to
change their password and end up not being able to login.
I really hope I'm wrong though.
> So here is my question. Is there a way to get the extra keys in place
> during the conversion? Or can I dump the database and reload it somehow
> and get what I want?
> Otherwise do I have to make 40,000 plus users connect and reset their
> Thanks in advance for your help.
> Steve Devine
> Michigan State University
> Kerberos mailing list Kerberos at mit.edu
More information about the Kerberos