kdb5_util stash question

[Will Fiveash]

On Fri, Jan 20, 2012 at 07:35:23PM -0500, Greg Hudson wrote:
> On 01/20/2012 06:54 PM, Will Fiveash wrote:
> > Does the kdb5_util stash require the admin running it know the master
> > key password or should it be able to extract it from the K/M princ?
> 
> By design, it's impractical to extract the master key from the K/M princ
> alone.  kdb5_util stash can use either an existing stash file or an
> admin-specified password to decrypt the keys in the K/M entry.

Thanks, that makes sense.

-- 
Will Fiveash