Re: Fwd: Protocols of heimdal servers

[Love <lha@stacken.kth.se>]

Jose Gonzalez Gomez <jgonzalez.openinput@gmail.com> writes:

> In fact I have my database stored in LDAP, and I planned to do all the
> administration this way using Java/JNDI, but I don't have any clue
> about how to modify the krb5Key attribute, where I guess the password
> is stored, am I right? How can I update it? I guess I must also update
> the krb5KDCFlags... is there any documentation about this? Or should I
> read the code as Luke sugested?

A way to update the krb5Key entry is to set a new password with the
password changing api.

The krb5KDCFlags are documented in the schema, and is the same as the
bitstring HDBFlags (se lib/hdb/hdb.asn1) encoded as an integer.

Love

PGP signature