Updating cross-realm keys?

Derek Atkins derek at ihtfp.com
Mon Jan 30 10:32:02 EST 2017


I'm in the process of upgrading my MIT KDC from an old version to a more
modern version.  As part of the upgrade I'd also like to refresh my
master key and all my shared (cross-realm) keys.  I found the
documentation at [0] for updating my krbtgt, service, and master keys
(although it doesn't quite talk about how to update the stash file).
However nowhere could I find any documentation for updating a
cross-realm key.  Is there such a process?



[0] https://web.mit.edu/kerberos/krb5-1.12/doc/admin/advanced/retiring-des.html

       Derek Atkins                 617-623-3745
       derek at ihtfp.com             www.ihtfp.com
       Computer and Internet Security Consultant

More information about the krbdev mailing list