[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Disabling a principal

On Jun 3, 2008, at 6:23 AM, Björn Sandell wrote:

> Hi there,
> On Tue, 3 Jun 2008 06:02:01 -0700
> rcsheets@picosecond.org (Robert C. Sheets) wrote:
>> How do I disable a principal, so that it cannot authenticate. For
>> example, let's say I discover that a password has been compromised.
>> What's the best way to disable the principal temporarily?
> I use
> kadmin mod -a disallow-all-tix principal


kadmin mod -a -disallow-all-tix principal

to undo it when/if it's safe.

The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu