[krbdev.mit.edu #8744] git commit

Greg Hudson via RT rt-comment at KRBDEV-PROD-APP-1.mit.edu
Wed Dec 5 11:02:33 EST 2018


Document necessary delay in master key rolllover

During master key rollover, if the old master key is purged
immediately after updating principal encryption, running processes may
not successfully update their in-memory copies of the master key.
Document that the administrator should delay purging the master key
until after propagation and some daemon activity.

(cherry picked from commit 24425b730161c3d27d86a7ae0caa2305f70167f6)

https://github.com/krb5/krb5/commit/91f331c507f6d36906b8432485b9b639c31ebff2
Author: Greg Hudson <ghudson at mit.edu>
Commit: 91f331c507f6d36906b8432485b9b639c31ebff2
Branch: krb5-1.17
 doc/admin/database.rst |    4 ++++
 1 files changed, 4 insertions(+), 0 deletions(-)



More information about the krb5-bugs mailing list