afs to k5 conversion keytypes

[Mike Dopheide]

Steve,

To my knowledge there is no way to convert keys like you're wanting to do.  
My suggestion, if it's possible in your environment, would be to implement 
a password expiration policy with a deadline of a few months and let 
everyone gradually change their password.

The inevitable problem with that is the thousands of users who fail to 
change their password and end up not being able to login.

I really hope I'm wrong though.

-Mike


> So here is my question. Is there a way to get the extra keys in place
> during the conversion? Or can I dump the database and reload it somehow
> and get what I want?
> Otherwise do I have to make 40,000 plus users connect and reset their
> passwords?
> 
> Thanks in advance for your help.
> Steve Devine
> Michigan State University
> 
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
> 

--