kadmin/ principals

2013-01-14 Thread Jaap Winius
Hi folks, My Kerberos server includes four kadmin/... principals: kadmin/ad...@example.com kadmin/chang...@example.com kadmin/hist...@example.com kadmin/munchkin.example@example.com In this case, munchkin was the name of my current server when I first installed it. Soon after it

Re: kadmin/ principals

2013-01-14 Thread Nico Williams
The Solaris kadmin/kadmind use kadmin/fqdn principals. The MIT kadmin/kadmind can do that or use kadmin/admin (and kadmin/changepw, for password changes). Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerb

Re: Functional test of KDC for monitoring?

2013-01-14 Thread Roland C. Dowdeswell
On Sat, Jan 12, 2013 at 11:19:03AM +0100, Jan-Piet Mens wrote: > > > How are folks performing functional testing of KDCs (without PKINIT)? > > We have a very primitive Nagios/Icinga plugin (loosely based on [1]) > which invokes `kinit' with a keytab. This verifies that the round-trip > principal-