Re: krb4 -> heimdal migration

[joda@pdc.kth.se (Johan Danielsson)]

Mark Dawson <md@doc.ic.ac.uk> writes:

> I am trying to migrate principals from our Kerberos4 database to
> Heimdal (version 0.1c).

You are using 0.1c in all ends?

> When I attempt to kinit using a migrated principal I get 'kinit:
> Password incorrect' (details below).

My first guess is that it's some problem with (wrongly) encrypted
keys. How are you running hprop/hpropd? Are you running hprop in
network-mode, or are you dumping to standard out?

hprop -E -m m-key -4 -k FILE:keytab other-host

is what I use, with m-key being the (heimdal) master key file, and
keytab containing a `kadmin/hprop@NADA.KTH.SE' key.

> #0  verify_checksum (context=0x8094d70, crypto=0x0, usage=0,
> data=0x8096e78, 
>     len=256, C=0xbfffad24) at crypto.c:1236

You can look at `data' here and see if it looks good (a good
indication is the occurrence of 0x03, 0x02, 0x01 byte sequences :-).
The first part (8 + 16 bytes) is random data and zeros, so you can't
look at that.

If it does look ok, it's most likely some kind of checksum bug.

/Johan