transfer users from Kerberos to another authentication system

Matt Crawford crawdad at fnal.gov
Fri Jan 2 08:44:50 EST 2004


On Dec 30, 2003, at 6:53 PM, Gerd Pokorra wrote:
> Is it possible to extract the
>    users from a Kerberos database and to transfer them to another
>    authentication system?

If that other system can be made to use one of the same string-to-key 
functions that your Kerberos realm uses, then yes.  (Or if you knew in 
advance what sort of hashing that other system were likely to use, you 
could hack that into your realm before the last password-expiration 
interval comes and have all the info you'd need for the successor 
system when the time came.)



More information about the krbdev mailing list