Rocksolid Light

Welcome to RetroBBS

mail  files  register  newsreader  groups  login

Message-ID:  

When speculation has done its worst, two plus two still equals four. -- S. Johnson


devel / comp.protocols.kerberos / Replacing the Master KDC node.

SubjectAuthor
o Replacing the Master KDC node.Somanaththilak jeeva

1
Replacing the Master KDC node.

<mailman.0.1632986304.24879.kerberos@mit.edu>

  copy mid

https://www.rocksolidbbs.com/devel/article-flat.php?id=149&group=comp.protocols.kerberos#149

  copy link   Newsgroups: comp.protocols.kerberos
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!tncsrv06.tnetconsulting.net!.POSTED.pch.mit.edu!not-for-mail
From: thilak.jst@gmail.com (Somanaththilak jeeva)
Newsgroups: comp.protocols.kerberos
Subject: Replacing the Master KDC node.
Date: Thu, 30 Sep 2021 12:48:05 +0530
Organization: TNet Consulting
Lines: 16
Message-ID: <mailman.0.1632986304.24879.kerberos@mit.edu>
Mime-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Injection-Info: tncsrv06.tnetconsulting.net; posting-host="pch.mit.edu:18.7.21.50";
logging-data="13319"; mail-complaints-to="newsmaster@tnetconsulting.net"
To: kerberos@mit.edu
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=gZv+NtDb19K2jggMgDGBhvT2+mI8IJKFpIDJ9n5qmtXEAfAXKAtLzoHADypVxQKtUX48i+JmpR+h1w2A6VonAFc1XkOzkoJz3RW2XxJTkzmK1Bk+cVtvJUyQw6YcExAIqQPf13d+7b63sfZxkbsFeQi5BRtmTBPp+6GjGI2VOljT35AM+Y5WHLSGKgCkIB6LfqC+boeQfBkKFGhDRYVkVZYCutkOD6ULU5uZ5uYVGje4XN3L5XiQR/GOoLB/t4usdyUoMvlnF6tYSa8TCHBKZdI7gu4QZk7kgrToC5NZ8oit8j9ak90nnq1VfHlg7+emtxpNUVcSGFkVgJ6yhAxAYg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=SZXTAF9gqsQw8L7GnPheOcSTj/gosoZ3QKDk1v5qE0A=;
b=buR9FtKcXXUvbT6Hq5K4tIbvh7t8RZWwQO3cb+nadZ87k6nTuvnoVELrVEVi5lNvfhuhl685Xrm8kJw+UHO63LOTXxWN7TQeX51vhmPUWdeqvTYAG15aNUL6al4nGo7c8zfqkONhnYnqL/9vwdmB4GW1DIbPO53kupBerlXJKcfUbmGBYTRLEXjYTsnpGVL2Q7w8NOve1O2h30GFuSF22WC5wPSHI9z9BchazU9EZV+WYIFkPFeKMVJjKGjgPCc2sGWPezrZVzs9NRa4H3ecYN9TBf98psxW2HKZCAK2W7/IuxZhzK8MRkjFyNcgs4L3+F15ip6IbDSmjgt64bMTcg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=mitprod.onmicrosoft.com; s=selector2-mitprod-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=SZXTAF9gqsQw8L7GnPheOcSTj/gosoZ3QKDk1v5qE0A=;
b=ju6ZkOHUtM7INZD+2/uerci4WmJKNs/qSm0FqVfWHOc/rzF1nstIuIpb2fJeldA1mZFOHehES1eS8GuaF3tfabVXpEYQ7kA1xvNsjBvoWCZQXde0CqN/vOZ2oECfEdK8IdVI6bYdKatT/woGNTmS5V9eKqi7+JtHX45tXGX/hMA=
Authentication-Results: spf=pass (sender IP is 209.85.167.45)
smtp.mailfrom=gmail.com; mit.edu; dkim=pass (signature was verified)
header.d=gmail.com; mit.edu;
dmarc=pass action=none header.from=gmail.com;
Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates
209.85.167.45 as permitted sender) receiver=protection.outlook.com;
client-ip=209.85.167.45; helo=mail-lf1-f45.google.com;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112;
h=mime-version:from:date:message-id:subject:to;
bh=SZXTAF9gqsQw8L7GnPheOcSTj/gosoZ3QKDk1v5qE0A=;
b=C/qU985olKKaugNjnAlFJfG1ufRXH66La4zJTN6+7F740jkCL35h1HqRyPZxgkh/b2
EB1ISuFa/ggkBZmux20Gb8MrpJBFDhliXuG5Zb4QqE6yzElAu11a9CwQtn/WJYP13Y6j
ujvmyZcgox34xpw7P3A2rZ67oW3k9hoEQl2E+ak5zahUYuDeRhIVOjZTUEutkiZm0gQh
DzQ92MrIxQKbEqIW1dnB0EVdwjJgy1w9Sutp4GgCbpIhO//zaw6o/wkkOCRqPsxG297k
hsJqMmEl0bRbv1DPggJLrRaUAHdPl1f2SLqX0c0Y9YaM9X1WId0lHgKlDxza8vIwbfLb
9cCg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=SZXTAF9gqsQw8L7GnPheOcSTj/gosoZ3QKDk1v5qE0A=;
b=RUIMxDMo61MokNBcgSS2w1zmJqEhcb0eLbCjpMnDTY7JEmeAFL2aRq2Y7YW30nh/ll
n8uKtdYWy50IsmjY64awV21hyV9gCq7ljwnc9YneMN47EMMuqjT12uKJMKdKhD1KN6dj
bKW1t7lerQr93cLQtUgNWFYGczp8YcHZy/UmAXXODRrv7O1sJtFcU6hXKVdB7W/YA8s7
61g4r9O4MNqAzRM81kOtk1eBZ7GziZxqQ4Ybte5nqX8z0NwjLoVKnLio4vIUzyvizBWT
SmtBPKH9sZkgeGVWE3ARvg8ZkfUnC9rxq9NzDmz4gj+E9eAfNhVyqmACFRy2nUesWUVB
f1rQ==
X-Gm-Message-State: AOAM532TsGXOZRpgDbRq/Msn/vlDVCT9wGUHv571A50I8+03TGcE6Vuh
z3IzLW9w8ZJydjnoZ7OaHvoCwloZlKuyUMr+y1XV61ClS24=
X-Google-Smtp-Source: ABdhPJzwX6qduLArPX4REXrmAcxyDL3JydIzeh05JFdgSfefvIAImScc3BNDRsrMYLjZ8AZ0ueJwAIw+Ng4QsmbgQSI=
X-Received: by 2002:a2e:99d3:: with SMTP id l19mr4342771ljj.184.1632986296409;
Thu, 30 Sep 2021 00:18:16 -0700 (PDT)
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b:0
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: ece49dde-f9ff-49ad-2f75-08d983e27a4a
X-MS-TrafficTypeDiagnostic: DM5PR0102MB3576:
X-LD-Processed: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b,ExtAddr
X-MS-Exchange-AtpMessageProperties: SA
X-Microsoft-Antispam-PRVS: <DM5PR0102MB3576F53E533E9762521354F88BAA9@DM5PR0102MB3576.prod.exchangelabs.com>
X-MS-Oob-TLC-OOBClassifiers: OLM:7691;
X-MS-Exchange-SenderADCheck: 0
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:209.85.167.45; CTRY:US; LANG:en; SCL:1; SRV:;
IPV:NLI; SFV:NSPM; H:mail-lf1-f45.google.com;
PTR:mail-lf1-f45.google.com; CAT:NONE;
SFS:(4636009)(84050400002)(2906002)(336012)(76482006)(26005)(86362001)(55446002)(70586007)(68406010)(34206002)(73392003)(356005)(8676002)(33964004)(5660300002)(82202003)(7596003)(7636003)(508600001)(6666004)(316002)(42186006);
DIR:OUT; SFP:1102;
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-MS-Exchange-Transport-Forked: True
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 Sep 2021 07:18:18.7145 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: ece49dde-f9ff-49ad-2f75-08d983e27a4a
X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b
X-MS-Exchange-CrossTenant-AuthSource: CO1NAM11FT003.eop-nam11.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR0102MB3576
X-OriginatorOrg: mitprod.onmicrosoft.com
X-Content-Filtered-By: Mailman/MimeDel 2.1.6
X-BeenThere: kerberos@mit.edu
X-Mailman-Version: 2.1.6
Precedence: list
List-Id: The Kerberos Authentication System Mailing List <kerberos.mit.edu>
List-Unsubscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
<mailto:kerberos-request@mit.edu?subject=unsubscribe>
List-Archive: <http://mailman.mit.edu/pipermail/kerberos>
List-Post: <mailto:kerberos@mit.edu>
List-Help: <mailto:kerberos-request@mit.edu?subject=help>
List-Subscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
<mailto:kerberos-request@mit.edu?subject=subscribe>
 by: Somanaththilak jeeva - Thu, 30 Sep 2021 07:18 UTC

I am working on a procedure to replace the master kdc node with another
host.

Since I have a master - slave kdc setup I am not destroying the database,
instead after installing a new master node I just propagate the database
from the slave node.

During this I observed that there is a kerberos/hostname principal that was
created during the database creation when kdc was initialized.

How do I remove this principal and replace it with the principal of the new
master node?

--
With Regards
Somanath Thilak.J


devel / comp.protocols.kerberos / Replacing the Master KDC node.

1
server_pubkey.txt

rocksolid light 0.9.81
clearnet tor