Hi all,
I've got clients going back as far as Transarc 3.6 -- don't ask ....
there are clients that cannot be changed/rebooted/updated due to
"extreme sensitivity to change."
Right now both forms of the AFS service principal exist: "afs@REALM" and
"afs@cellname@REALM"
Realm and cell name are identical.
I had assumed that leaving the existing /usr/afs/etc/KeyFile alone and
_not_ updating afs@REALM (with new encryption type for rekey effort) was
the correct approach.
Is this in fact correct?
Given that there are both principals is there something else I've missed
relevant to the rekey process?
I had also assumed that, given the ancient versions of some of my
clients, I must leave the afs@REALM principal in place.
Is that correct?
Obviously I've had some surprises trying to get the rekeying accomplished.
Any pointers greatly appreciated.
Kim Kimball
_______________________________________________
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info