generating keys from a web app(php)

Matthew Andrews mnandrews at lbl.gov
Fri Apr 6 12:58:50 EDT 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,

I'm looking to see if anyone has any suggestions on how best to go about
generating krb5 keys from a password(string_to_key) within a php based
web application. the intent here is to extend our current account
management software(which currently generates an md5 hash of the
password and stores it in a database) to generate krb5 keys. The idea is
that we currently do not have a central krb5 infrastructure, but are
interested in being able to deploy one in the future. We currently
require all users to change their passwords at regular intervals, and
figured that if we started saving keys away now, then any time after the
password change interval had elapsed, we could populate a krb5 kdc based
on the key's we'd been saving.

has anyone else done anything like this in php?

- -Matt Andrews
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFGFnxKkX3rPT2XmPsRAhvVAJ9mnbTESpjj2mP8PM+uknNXjolCqQCgkg8k
P2bcxECd1qpat1S8FWEoie4=
=BEpK
-----END PGP SIGNATURE-----



More information about the Kerberos mailing list