diff options
| author | Mark Eichin <eichin@mit.edu> | 1996-11-11 21:57:22 +0000 |
|---|---|---|
| committer | Mark Eichin <eichin@mit.edu> | 1996-11-11 21:57:22 +0000 |
| commit | b4e07db1468aa2b627f2472c3c88bda0877ca009 (patch) | |
| tree | acc7eeffb1bc441927c08519726d3bb2d016c0f9 /src/kadmin/dbutil/kdb5_util.M | |
| parent | 48592f98e589b9fa332ba33218754b5dd7d72074 (diff) | |
| download | krb5-b4e07db1468aa2b627f2472c3c88bda0877ca009.zip krb5-b4e07db1468aa2b627f2472c3c88bda0877ca009.tar.gz krb5-b4e07db1468aa2b627f2472c3c88bda0877ca009.tar.bz2 | |
* kadmin/dbutil dumpv4 expiration ("never") fixes
* kadmin/dbutil loadv4 stashfile, default fixes
(original changelogs included.)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9372 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/kadmin/dbutil/kdb5_util.M')
| -rw-r--r-- | src/kadmin/dbutil/kdb5_util.M | 38 |
1 files changed, 36 insertions, 2 deletions
diff --git a/src/kadmin/dbutil/kdb5_util.M b/src/kadmin/dbutil/kdb5_util.M index b364eeb..829e55a 100644 --- a/src/kadmin/dbutil/kdb5_util.M +++ b/src/kadmin/dbutil/kdb5_util.M @@ -159,7 +159,41 @@ if not specified. \fBdump_v4\fP [\fIfilename\fP] Dumps the current database into the Kerberos 4 database dump format. .TP -\fBload_v4\fP [\fB\-t\fP] [\fB-n\fP] [\fB\-K\fP] [\fB-f\fP] \fIinputfile\fP -Loads a Kerberos 4 database dump file. +\fBload_v4\fP [\fB\-t\fP] [\fB-n\fP] [\fB\-K\fP] [\fB-s \fIstashfile\fP] \fIinputfile\fP +Loads a Kerberos 4 database dump file. Options: +.RS +.TP +.B \-K +prompts for the V5 master key instead of using the stashed version. +.TP +.B \-n +prompts for the V4 master key, instead of reading from the stash file. +.TP +.B \-s \fIstashfile +gets the V4 master key out of \fIstashfile\fP instead of /.k +.TP +.B \-T +creates a new \fIkrbtgt\fP instead of converting the V4 one. The V5 server +will thus not recognize outstanding tickets, so this should be used +with caution. +.TP +.B \-v +lists each principal as it is converted or ignored. +.TP +.B \-t +uses a temporary database, then moves that into place, instead of adding +the keys to the current database. +.PP +Note: if the Kerberos 4 database had a default expiration date of 12/31/1999 +or 12/31/2009 (the compiled in defaults for older or newer Kerberos +releases) then any entries which have the same expiration date will be +converted to "never" expire in the version 5 database. If the default +did not match either value, all expiration dates will be preserved. +.PP +Also, Kerberos 4 stored a single modification time for any change to a +record; Version 5 stores a seperate modification time and last +password change time. In practice, Version 4 "modifications" were +always password changes. \fIload_v4\fP copies the value into both +fields. .SH SEE ALSO kadmin(8) |