On 17/02/15 22:51, Benjamin Kaduk wrote:
> On Tue, 17 Feb 2015, Giuseppe Mazza wrote:
>
>> On 17/02/15 17:36, Benjamin Kaduk wrote:
>>> On Tue, 17 Feb 2015, Giuseppe Mazza wrote:
>>
>>
>> client% head -20 /etc/krb5.conf
>> [appdefaults]
>> # [dwm] necessary for DOC.IC.AC.UK
>> allow_weak_crypt
On 18/02/15 10:57, Giuseppe Mazza wrote:
> On 17/02/15 22:51, Benjamin Kaduk wrote:
>> On Tue, 17 Feb 2015, Giuseppe Mazza wrote:
>>
>>> On 17/02/15 17:36, Benjamin Kaduk wrote:
On Tue, 17 Feb 2015, Giuseppe Mazza wrote:
>>>
>>>
>>> client% head -20 /etc/krb5.conf
>>> [appdefaults]
>>> # [dwm]
On Wed, 18 Feb 2015, Giuseppe Mazza wrote:
> A collegue of mine lets me know that it could be a different issue.
> Here is his root principal:
> kadmin.local: get_principal collegue/root
> Principal: collegue/r...@doc.ic.ac.uk
> Expiration date: [never]
> Last password change: Thu Feb 24 11:40:22
On 02/04/2015 06:24 AM, Michael Ströder wrote:
> For some attribute types with IA5Syntax there's defined:
>
> SUBSTR caseExactSubstringsMatch
>
> IMHO this is wrong. It has to be:
>
> SUBSTR caseExactIA5SubstringsMatch
>
> Where to file a ticket?
Sorry for the slow response. Pleas
Hello Kerberos community,
I have created a problem with my Kerberos installation -- the master key K/
m...@my.realm.org was accidentally removed while cleaning out some really
crufty stuff, and I'd like to try and recover from this as gracefully as
possible. Here are some details:
I have a kerber
On 02/18/2015 05:49 PM, Charles Adams wrote:
> slave1# kdb5_util dump -ov -verbose ~/kerbmaster-ov K/m...@my.realm.org
> slave1# kdb5_util dump -verbose ~/kerbmaster K/m...@my.realm.org
I don't think there's ever much call to use dump -ov today, although the
documentation was unclear on that point
Greg,
Thank you very much. I was able to restore full functionality on my realm.
If you are ever out in sunny Scotts Valley, CA, shoot me an email and I'll
buy you a round.
Kerberos community,
I do NOT recommend removing your K/M principal, but if that happens, here
is a recovery path should yo
