[14854] in Kerberos
Can we rename a principal yet?
daemon@ATHENA.MIT.EDU (Christopher P. Lindsey)
Wed Aug 1 01:35:15 2001
X-Envelope-From: lindsey
X-Envelope-To: kerberos@MIT.EDU
Date: Wed, 1 Aug 2001 00:32:33 -0500
From: "Christopher P. Lindsey" <lindsey@mallorn.com>
To: kerberos@MIT.EDU
Message-ID: <20010801003233.A20394@mallorn.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Yes, I know it's a FAQ, and yes, I know the key is (usually) salted
with the entire principal name.
In my specific case, I'm only salting the key with the realm name since
the instance for many of these principals will change at a later date.
As an aside, is there any way to specify an alternative salt via
kadmin? The docs indicate that you can do '-e enctype:salttype' or
even '-salt salttype', but neither appears to work for me. I can
change/add it in kdc.conf, but that's not too exciting either.
Thanks,
Chris
