Migrating a Kerberos Realm
John Hascall
john at iastate.edu
Wed Nov 1 22:04:36 EST 2006
> But the database can store a special
> salt string for a principal's key, so you'd modify some (most?)
> entries for users to have the salt string computed based on the old
> realm name.
If anyone is thinking of going down this road, be aware that
there are some crappy client implementations out there
(* looks in the direction of WebCT Vista and coughs *)
that don't handle a non-default salt correctly...
John
More information about the Kerberos
mailing list