[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: need more explanation on krb4->krb5 conversion
Well, it seems I got it working, but with a method far away from the one
suggested in manpage :-) It is still a bit complicated, so it will require
further "research", but working:
1. dump of the krb4 database with kdb_util
2. dump of the "default" heimdal database with kadmin -l
3. /usr/local/heimdal/libexec/hprop -n -k /etc/krb5.keytab --source=krb4-dump -d /usr/local/heimdal/libexec/hprop -n -k /etc/krb5.keytab --source=krb4-dump -d
where /etc/krb5.keytab contains hprop/`hostname` keys
4. merge of the converted database with file from (2) via kadmin
The special thing for me is the use of "-D" in the (3) which seems to
cause conversion des-cbc-sha1 keys of old krb4 database entries to
Now I am going to study incremental updates to simplify the task.
Thank you all for the help.