Re: Building your own vs. deploying OS packaged version of MIT Kerberos?

2016-06-01 Thread Tareq Alrashid
Thank you one and all for the provided feedback! Greatly helpful and very much appreciated. Tareq > On May 13, 2016, at 11:51 AM, Robbie Harwood wrote: > > Tareq Alrashid writes: > >> The new world order seem to demand some adjustments to how we do >> things nowadays with on premise and clou

Deleting and re-creating the default krbtgt principal?

2016-06-01 Thread Todd Grayson
Is there any kind of guidance or rules of thumb around deleting and re-creating the default krbtgt principal for a KDC? I've not been able to find specific discussion on doing this, or what the requirements would be for properly re-creating the entry. The issue has to do with wanting to reset a n

Re: Deleting and re-creating the default krbtgt principal?

2016-06-01 Thread Greg Hudson
On 06/01/2016 02:13 PM, Todd Grayson wrote: > Is there any kind of guidance or rules of thumb around deleting and > re-creating the default krbtgt principal for a KDC? I've not been able to > find specific discussion on doing this, or what the requirements would be > for properly re-creating the e

Re: Deleting and re-creating the default krbtgt principal?

2016-06-01 Thread Todd Grayson
Thanks Greg! I also found this procedure, we'll use modprinc on the other actual user/service principals, and then follow this for modifying the krbtgt. http://web.mit.edu/kerberos/krb5-1.13/doc/admin/database.html#changing-krbtgt-key On Wed, Jun 1, 2016 at 12:25 PM, Greg Hudson wrote: > On 06/