Re: Disabling a principal

["Henry B. Hotz" <hotz@jpl.nasa.gov>]

On Jun 3, 2008, at 6:23 AM, Björn Sandell wrote:

> Hi there,
>
> On Tue, 3 Jun 2008 06:02:01 -0700
> rcsheets@picosecond.org (Robert C. Sheets) wrote:
>
>> How do I disable a principal, so that it cannot authenticate. For
>> example, let's say I discover that a password has been compromised.
>> What's the best way to disable the principal temporarily?
>
> I use
>
> kadmin mod -a disallow-all-tix principal

and

kadmin mod -a -disallow-all-tix principal

to undo it when/if it's safe.

------------------------------------------------------
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu