[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: mit krb5 > heimdal db problems..
The MIT krb5 v1.2.x kdb5_util dump command has two undocumented options
to re-key the database as it is dumped. One option, "-mkey_convert,"
indicates that you want to re-key; the other, "-new_mkey <stash file>,"
allows you to specify a stash file containing the new key, instead of
letting kdb5_util prompt you. You can use kdb5_util stash to create a
new stash file.
Chris Csanady wrote:
>Is it possible to convert a mit 1.2.2 database with a 3des master
>key to a heimdal database? From the documentation, it looks like I
>kstash ; hprop -n --source=mit-dump -d mit_dump.b7 | hpropd -n
>However, the resulting database does not work. From kadmin -l,
>kadmin> get ...
>kadmin: get ...: No correct master key
>Does anyone know what the problem is?