Migrating a Kerberos Realm

John Hascall john at iastate.edu
Wed Nov 1 22:04:36 EST 2006


>                                  But the database can store a special  
> salt string for a principal's key, so you'd modify some (most?)  
> entries for users to have the salt string computed based on the old  
> realm name.

   If anyone is thinking of going down this road, be aware that
   there are some crappy client implementations out there
   (* looks in the direction of WebCT Vista and coughs *)
   that don't handle a non-default salt correctly...

John



More information about the Kerberos mailing list