[27643] in Kerberos
kdb5_util dump and load questions
daemon@ATHENA.MIT.EDU (Matthew B. Brookover)
Sat Apr 7 21:09:02 2007
From: "Matthew B. Brookover" <mbrookov@mines.edu>
To: kerberos@mit.edu
Date: Sat, 07 Apr 2007 19:08:47 -0600
Message-Id: <1175994527.15065.17.camel@merlin.Mines.EDU>
Mime-Version: 1.0
Reply-To: mbrookov@mines.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
I did a kdb5_util dump and a kdb5_util dump -ov from Kerberos 5 version
1.4.1, the -ov option generates some warnings:
[root@s1 krb5kdc]# kdb5_util dump s1-old-kdb-dump
[root@s1 krb5kdc]# kdb5_util dump -ov s1-old-kdb-dump.ov
Warning! No DES-CBC-CRC key for principal testua@DEVMINES.EDU, cannot
generate OV-compatible record; skipping
Warning! No DES-CBC-CRC key for principal testua@DEVMINES.EDU, cannot
generate OV-compatible record; skipping
Warning! No DES-CBC-CRC key for principal testuc@DEVMINES.EDU, cannot
generate OV-compatible record; skipping
Warning! No DES-CBC-CRC key for principal testuc@DEVMINES.EDU, cannot
generate OV-compatible record; skipping
Warning! No DES-CBC-CRC key for principal testud@DEVMINES.EDU, cannot
generate OV-compatible record; skipping
Warning! No DES-CBC-CRC key for principal testuf@DEVMINES.EDU, cannot
generate OV-compatible record; skipping
Warning! No DES-CBC-CRC key for principal testuf@DEVMINES.EDU, cannot
generate OV-compatible record; skipping
[root@s1 krb5kdc]#
When I try to import the file into Kerberos 5 version 1.5.2 I get more
messages:
[root@s1 krb5kdc]# kdb5_util load s1-old-kdb-dump
[root@s1 krb5kdc]# kdb5_util load -update s1-old-kdb-dump.ov
(null): Unknown code imp 4 testua@DEVMINES.EDU
(null): Unknown code imp 4 testua@DEVMINES.EDU
(null): Unknown code imp 4 testuc@DEVMINES.EDU
(null): Unknown code imp 4 testuc@DEVMINES.EDU
(null): Unknown code imp 4 testud@DEVMINES.EDU
(null): Unknown code imp 4 testuf@DEVMINES.EDU
(null): Unknown code imp 4 testuf@DEVMINES.EDU
[root@sixoften krb5kdc]#
What do the warnings from the dump mean?
Also, what does the corresponding error from the load mean?
There are other principals in the kdc that do not generate any warnings
or errors. In kadmin the the principals look fine after the load.
Unfortunately, I do not have passwords for these principals.
Thank You.
Matt
mbrookov@mines.edu
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
