Kadmin service principal revisited

Matt Crawford crawdad at fnal.gov
Tue Sep 2 10:32:37 EDT 2003

On Friday, Aug 29, 2003, at 16:46 America/Chicago, Jeffrey Hutzelman 
 > The server should accept tickets for any kadmin/* principal in its 

GSS makes this a bit tedious to do, but not impossible.  Using 
kadmin/f.q.d.n seems all right, although it suggests the question of 
whether to change kadmin/changepw as well, (especially with a diverse 
installed client base).

More information about the krbdev mailing list