Updating cross-realm keys?

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view

Updating cross-realm keys?

Derek Atkins-2

I'm in the process of upgrading my MIT KDC from an old version to a more
modern version.  As part of the upgrade I'd also like to refresh my
master key and all my shared (cross-realm) keys.  I found the
documentation at [0] for updating my krbtgt, service, and master keys
(although it doesn't quite talk about how to update the stash file).
However nowhere could I find any documentation for updating a
cross-realm key.  Is there such a process?



[0] https://web.mit.edu/kerberos/krb5-1.12/doc/admin/advanced/retiring-des.html

       Derek Atkins                 617-623-3745
       [hidden email]             www.ihtfp.com
       Computer and Internet Security Consultant
krbdev mailing list             [hidden email]