Re: mit krb5 > heimdal db problems..

[Nicolas Williams <Nicolas.Williams@verizon.net>]

The MIT krb5 v1.2.x kdb5_util dump command has two undocumented options 
to re-key the database as it is dumped. One option, "-mkey_convert," 
indicates that you want to re-key; the other, "-new_mkey <stash file>," 
allows you to specify a stash file containing the new key, instead of 
letting kdb5_util prompt you. You can use kdb5_util stash to create a 
new stash file.

Nico


Chris Csanady wrote:

>Is it possible to convert a mit 1.2.2 database with a 3des master
>key to a heimdal database?  From the documentation, it looks like I
>need:
>
>kstash ; hprop -n --source=mit-dump -d mit_dump.b7 | hpropd -n
>
>However, the resulting database does not work.  From kadmin -l,
>
>kadmin> get ...
>kadmin: get ...: No correct master key
>
>Does anyone know what the problem is?
>
>Thanks,
>Chris Csanady
>
>
>