keytab, kvno, ktadd, and existing tickets

[Russ Allbery]

Chris Hecker <checker at d6.com> writes:

> That makes sense.

> Maybe I add ktexport only when building as kadmin.local as a compromise.

That's already there.  :)  It's the -norandkey option to ktadd in
kadmin.local.

> If I was in there modifying kadmin.local, I'd also fix the message that 
> says it's "Authenticating as principal root/admin at BLAH.COM with 
> password." which is not actually true, nor does that princ even exist in 
> my kdc.  :)

Yeah, that's always been weird.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>