Rick Cochran <[EMAIL PROTECTED]> writes:
> I'm stuck. I've looked at all the documentation I can find, and I've
> even asked Transarc, who, despite their recently declared intentions
> to address expanded authentication services, told me they couldn't
> help me.
You could try asking the krb4 maintaners :-)
> I'm trying to set up a kpop server. I'm using the one in the kth
> distribution. My idea of what I need to make this work is:
>
> (anywhere)
> kas create pop.holmes -admin admin
>
> (as root on holmes)
> ksrvutil -p admin get
>
> then invoke ksrvutil with 'change' to scramble the key. Not sure of
> the exact command for this.
This is one way of doing it:
1)
Use kas create to add pop.holmes to the kaserver database, *remember* the password
Use kas examine to figure out what key version number you got
2)
datan$ ksrvutil -i -c msc.cornell.edu add
Name: pop
Instance: holmes
Realm: MSC.CORNELL.EDU
Version number: 1 (or whatever)
New principal: [EMAIL PROTECTED]; version 1
Is this correct? (y,n) [y]y
Password: (password from step one)
Verifying password - Password: (password from step one)
Key successfully added.
Would you like to add another key? (y,n) [y]n
Old keyfile in /tmp/foobar.old.
*Forget* the password.
Please note that it is necessary to use the -c CellName switch to generate
identical DES keys using the Transarc string to key algorithm.
Cheers,
Bjvrn
--
_ _ ,_______________.
Bjorn Gronvall (Bjvrn Grvnvall) /_______________/|
Swedish Institute of Computer Science | ||
PO Box 1263, S-164 29 Kista, Sweden | Schroedingers ||
Email: [EMAIL PROTECTED], Phone +46 -8 752 15 25 | Cat |/
Cellular +46 -70 768 06 35, Fax +46 -8 751 72 30 `---------------'
