Re: krb5key heimdal+ldap

[Adam Tauno Williams <adam@morrison-ind.com>]

> I'm using openldap and kerberos Heimdal on my system.
> But in my network the users only change their
> passwords throught some internal website. I don't now
> how to create krb5key entries that contains the
> kerberos passwords, the krb5key entries are defined in
> krb5kdc schema.> 
> A need a tool that will receive the password ( in
> clear text maybe or other
> format) and return the password in the kerberos
> (heimdal) format (des-cbc-sha1
> des-cbc-md5 ...)

Simply change the password via the change-password extended operation.  The DSA
will do all the work for you if you have loaded/configured the correct
overlays.