Kadmin service principal revisited

Matt Crawford crawdad at fnal.gov
Tue Sep 2 10:32:37 EDT 2003


On Friday, Aug 29, 2003, at 16:46 America/Chicago, Jeffrey Hutzelman 
wrote:
 > The server should accept tickets for any kadmin/* principal in its 
keytab

GSS makes this a bit tedious to do, but not impossible.  Using 
kadmin/f.q.d.n seems all right, although it suggests the question of 
whether to change kadmin/changepw as well, (especially with a diverse 
installed client base).



More information about the krbdev mailing list