>>>>> "RA" == Russ Allbery <[EMAIL PROTECTED]> writes:

    RA> "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> writes:
    >> I'd like to change the hostname of my kdc, but I'm worried that
    >> this will break kerberos.  What steps should I take to ensure this
    >> doesn't happen?  I'm running MIT kerberos version 1.6.2 under
    >> CentOS 5.  I have a primary KDC and a backup KDC.

    RA> As long as you update DNS SRV records and krb5.conf files
    RA> accordingly, changing the hostname shouldn't be an issue.  The
    RA> Kerberos database itself doesn't care about the local hostname.

    RA> -- Russ Allbery ([EMAIL PROTECTED]) <http://www.eyrie.org/~eagle/>

One possible side issue is kprop -- when you change the hostname you'll
have to authorize the new host principal to push the database to the
slaves (kpropd.acl).

-- 
  Richard Silverman
  [EMAIL PROTECTED]

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to