afs to k5 conversion keytypes

Mike Dopheide dopheide at
Mon Feb 21 17:35:40 EST 2005


To my knowledge there is no way to convert keys like you're wanting to do.  
My suggestion, if it's possible in your environment, would be to implement 
a password expiration policy with a deadline of a few months and let 
everyone gradually change their password.

The inevitable problem with that is the thousands of users who fail to 
change their password and end up not being able to login.

I really hope I'm wrong though.


> So here is my question. Is there a way to get the extra keys in place
> during the conversion? Or can I dump the database and reload it somehow
> and get what I want?
> Otherwise do I have to make 40,000 plus users connect and reset their
> passwords?
> Thanks in advance for your help.
> Steve Devine
> Michigan State University
> ________________________________________________
> Kerberos mailing list           Kerberos at


More information about the Kerberos mailing list