Re: Heidmal Keytab Format

[Michael B Allen <mba2000@ioplex.com>]

On Tue, 2 May 2006 09:30:11 +1000
"ronnie sahlberg" <ronniesahlberg@gmail.com> wrote:

> I think that is just an entry that has been expired/deleted.
> 
> When an entry is deleted from a keytab file   instead of rewriting the
> entire file   kerberos will
> change the length of teh entry to -length   and zero out all bytes for the
> actual entry itself.
> 
> 
> I.e.  When you find an entry where length is negative   it means a deleted
> entry  so just skip -length bytes forward
> and read the next entry in the file.

Well that's kind of important!

Thanks,
Mike