[krbdev.mit.edu #5511] Documentation ambiguous

Jeff Blaine via RT rt-comment at krbdev.mit.edu
Fri Apr 6 15:15:16 EDT 2007


==== QUOTE ====
To extract a keytab on a KDC called kerberos.mit.edu, you would execute 
the following command:"

      kadmin: ktadd host/kerberos.mit.edu
      kadmin: Entry for principal host/kerberos.mit.edu at ATHENA.MIT.EDU with
           kvno 1, encryption type DES-CBC-CRC added to keytab
           WRFILE:/etc/krb5.keytab.
      kadmin:
==== END QUOTE ====

This first sentence should read:

     "To extract a keytab for the principal host/kerberos.mit.edu,
      you would execute the following command:"

Here's why:  The word usage is ambiguous.  The portion "To extract
a keytab on a KDC called kerberos.mit.edu" can be read two ways.

1.  "a KDC called kerberos.mit.edu" could mean the hostname of
     the KDC is kerberos.mit.edu

2.  OR... "called kerberos.mit.edu" could be referring to the
     keytab name, so to speak.






More information about the krb5-bugs mailing list