https://www.mail-archive.com/heimdal-discuss@sics.se/msg00334.html
There’s also a long, historically-interesting, thread on migrating from MIT that includes an example. > On Mar 14, 2017, at 11:51 AM, Henry B (Hank) Hotz, CISSP <hbh...@oxy.edu> > wrote: > >> On Mar 14, 2017, at 9:43 AM, Adam Lewenberg <ada...@stanford.edu> wrote: >> >> How do I re-encrypt the entries of the Heimdal KDC database if I want to >> change its master key? > > Shut down all daemons on the master. > > hprop --decrypt --stdout | hpropd --stdin > > Restart all daemons. > > That’s from memory. I think some other options may be needed, like keytab > files. I published this once in a presentation at one of the AFS&Kerb best > practices workshops, but I don’t remember the year. > > Personal email. hbh...@oxy.edu Personal email. hbh...@oxy.edu
