[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: heimdal 0.1d patches: verbose hprop -K, kaserver switch, keytab fallback
"Brandon S. Allbery KF8NH" <email@example.com> writes:
> The main reason for this option is so that heimdal's KDC can be
> run in parallel with an existing kaserver in order to transfer the
> kaserver.DB0 before shutting down the kaserver and bringing up kdc
> as a kaserver.
Which won't work well, since the (unpatched) kaserver listens to both
port kerbero5/udp (88), and kerberos/udp (750). So you still need to
move your kdc to some other port, and then you might as well respond
to kaserver talk (not that you're gonna get any).