keytab, kvno, ktadd, and existing tickets

[Chris Hecker]

> That's already there. :) It's the -norandkey option to ktadd in
> kadmin.local.

I just switched to my mailer to say I looked at the 1.9.1 source to make 
the mod and found -norandkey and was thinking "somebody is going to have 
replied with 'it's already there'".  :)

CentOS is still on 1.6.1 (!), so I don't have it on the server.  I guess 
I'll build latest there if I need it.

Thanks for putting up with all my noob questions and mails!

Chris


On 2011/07/23 01:14, Russ Allbery wrote:
> Chris Hecker<checker at d6.com>  writes:
>
>> That makes sense.
>
>> Maybe I add ktexport only when building as kadmin.local as a compromise.
>
> That's already there.  :)  It's the -norandkey option to ktadd in
> kadmin.local.
>
>> If I was in there modifying kadmin.local, I'd also fix the message that
>> says it's "Authenticating as principal root/admin at BLAH.COM with
>> password." which is not actually true, nor does that princ even exist in
>> my kdc.  :)
>
> Yeah, that's always been weird.
>