Re: need more explanation on krb4->krb5 conversion

[David Komanek <xdavid@lib-eth.natur.cuni.cz>]

Well, it seems I got it working, but with a method far away from the one
suggested in manpage :-) It is still a bit complicated, so it will require
further "research", but working:

1. dump of the krb4 database with kdb_util
2. dump of the "default" heimdal database with kadmin -l
3. /usr/local/heimdal/libexec/hprop -n -k /etc/krb5.keytab --source=krb4-dump -d /usr/local/heimdal/libexec/hprop -n -k /etc/krb5.keytab --source=krb4-dump -d
   where /etc/krb5.keytab contains hprop/`hostname` keys
4. merge of the converted database with file from (2) via kadmin

The special thing for me is the use of "-D" in the (3) which seems to
cause conversion des-cbc-sha1 keys of old krb4 database entries to
des-cbc-md5.

Now I am going to study incremental updates to simplify the task.

Thank you all for the help.


David Komanek