Rocksolid Light

Welcome to novaBBS (click a section below)

mail  files  register  newsreader  groups  login

Message-ID:  

Perl programming is an *empirical* science! -- Larry Wall in <10226@jpl-devvax.JPL.NASA.GOV>


devel / comp.protocols.kerberos / How to rekey kadmin/history

SubjectAuthor
o How to rekey kadmin/historyMike

1
How to rekey kadmin/history

<mailman.1.1696674091.2263420.kerberos@mit.edu>

 copy mid

https://www.novabbs.com/devel/article-flat.php?id=377&group=comp.protocols.kerberos#377

 copy link   Newsgroups: comp.protocols.kerberos
Path: i2pn2.org!i2pn.org!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!tncsrv06.tnetconsulting.net!.POSTED.mailman.mit.edu!not-for-mail
From: kerbe...@norgie.net (Mike)
Newsgroups: comp.protocols.kerberos
Subject: How to rekey kadmin/history
Date: Sat, 7 Oct 2023 11:21:24 +0100
Organization: TNet Consulting
Lines: 27
Message-ID: <mailman.1.1696674091.2263420.kerberos@mit.edu>
References: <ZSExJFGjyAMYAGGw@lightning.iz.norgie.net>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
protocol="application/pgp-signature"; boundary="ZZsxLIoklvhxcOJ0"
Injection-Info: tncsrv06.tnetconsulting.net; posting-host="mailman.mit.edu:18.7.21.50";
logging-data="18703"; mail-complaints-to="newsmaster@tnetconsulting.net"
To: kerberos@mit.edu
Authentication-Results: mit.edu;
dmarc=fail (p=reject dis=none) header.from=norgie.net
Authentication-Results: mit.edu; arc=fail smtp.remote-ip=18.9.3.18
ARC-Seal: i=2; a=rsa-sha256; d=mit.edu; s=arc; t=1696674090; cv=fail;
b=i9Dem5QTF9vmKQD+48BrgqdB8xb5ykgiVfUp7Y63xPn6TPUs24/6x02cQ65xQG6EyqU+UKgYqz/NP96hE/UsF/bFmRtbffOVPu3U5EKyn+pW3pZUojVr8NwBtHJemb6j+PkHn0DGKT0Zsh73bxLRvvOdhDDKrNysHUXGPxFB4lJ50c6SB3LmK82++WMHDa+Y71ZaKTEzBpSrUDx0hTtOFuxEwvCDbVgvU4hXGPCWKKXcsmZlDS8r9WLSI1NXMIqzBw3W1vyFPvOWvx0uFUNLVfFKa012oUv4BWi8DlNuBvzjqQOtL7nb6Te4kKVkfkANu9gMZ9oqNizaOpZ5Jh9YFQ==
ARC-Message-Signature: i=2; a=rsa-sha256; d=mit.edu; s=arc; t=1696674090;
c=relaxed/relaxed; bh=i5hDTYNMXPwgPESgD4jNdE4ktLrruVS6Ghvcmwmqw84=;
h=Date:From:Subject:Message-ID:MIME-Version:Content-Type;
b=Bn9d8Naf/j4kiG4NNv26hSd32Ya9UrHL8PKKdolbANUeJPAkjFvnowPFzcxMbDDMeiRL4c7J2nopsYaI6Sx1FVC0gd6EPCHVpv3a9OWUT9pMzA8BzW3YlcEKpHZs7uc1q8zrbelmU0+utGbpArEExOeQdRx0aqqcxMwN4HubKZxn4ApS2b2pIwaEErVDlEaLO/RbhKYkkZMYWVokd53Xkyg+fmx5hUcgHg2zQfLZ+valRu6didmUFRlNi069j/uCtzqZpgd4gx1MQ2eGdQRMrB7Jk6dKiGYTJtXEOXKIcIAc3brJG+MuwGjWI89NHvo+I137MZv77i27PHr/Ca2xEw==
ARC-Authentication-Results: i=2; mit.edu; dkim=fail (1024-bit key;
unprotected) header.d=mitprod.onmicrosoft.com
header.i=@mitprod.onmicrosoft.com header.a=rsa-sha256
header.s=selector2-mitprod-onmicrosoft-com header.b=LKp7/H57
reason="signature verification failed"; dkim=fail (4096-bit key;
unprotected) header.d=norgie.net header.i=@norgie.net header.a=rsa-sha256
header.s=default header.b=QoNkgfFc reason="signature verification failed"
Authentication-Results: mit.edu;
dkim=fail reason="signature verification failed" (1024-bit key;
unprotected) header.d=mitprod.onmicrosoft.com
header.i=@mitprod.onmicrosoft.com header.a=rsa-sha256
header.s=selector2-mitprod-onmicrosoft-com header.b=LKp7/H57;
dkim=fail reason="signature verification failed" (4096-bit key;
unprotected) header.d=norgie.net header.i=@norgie.net header.a=rsa-sha256
header.s=default header.b=QoNkgfFc
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=CFdiGEF9XhMvTyZd/cQnYE96XFx90gs/G3hW98z0oTuipHYfDt1rIyzikZ8Q9Z0rvojrizS/TAZ+mpnZCtMTb8nSAL5qRy0QZiWq27mI5bKR0XtJzYfgEmUEBCihQYZGd3J1jeADSRSNM/LuCULUM55vLHmjJittfOPTUu69jjQb9+d8gaQf3/LMiPA7LYOp8LMj6P8YFLN5j73GC99Q032mql1OTw6tX2aD1v8gyqRHXpA7UuCQu0QGZQYJaJXEiBjXUSm4TBo5DMwqJBfHLc6ovBrMcuW+x/UvtGbQp2Wn2hAHD8gAqkDoBgjzc+vRTlG9beflQX4OfUw+zx41AQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=v6QPJcfW4XIFKV14zWqnsfXEgPHEzFJGSLLUOkqlf9U=;
b=NmcDCqO++msWTE/TP0J7hZWs0vr4cmcijDMEcOgtY9UZTFTs+zmjXgFWlpY81wfaOcSqPshwNcoB/HJtgczbMXcsXUmL8v432DFwi8gkk6+gT/+oEKF5Nu0v+h235UXi+Rq4kj0LwEpSRGblb4TD/oyudkXrKBVeKSxZozfBl/pq4956osvFpw+FDvAAluf0MEE+4nA67Crmcy+OzOejVB+uv6fl5MSKjruc+T3uGN1myFHpREliYz1aRaNXwsE4+OmDh5rzQUo3Z/h5mGETegN4xt71B5f5RR+It6fAA+zaOt+X/nV7wgqrjoHe9UydDZivfTxt3DVmOcCJHA+VwQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is
81.187.90.236) smtp.rcpttodomain=mit.edu smtp.mailfrom=norgie.net; dmarc=pass
(p=reject sp=reject pct=100) action=none header.from=norgie.net; dkim=pass
(signature was verified) header.d=norgie.net; arc=none (0)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=mitprod.onmicrosoft.com; s=selector2-mitprod-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=v6QPJcfW4XIFKV14zWqnsfXEgPHEzFJGSLLUOkqlf9U=;
b=LKp7/H573CeEjkUUmup1Z+w6e8SGPPxQPTOycwITlDZrAw0E2MEG+pwWdLbOp/hA7CCVw97/uIztSeXhc2oNvtuPNSpO5JL1y75BUtTgorPWhhyWXCkZq57RX9Cy+jowHgMiySDsqLBfot8l5UHN/qmU1BiVHmkY2RRmmNfGxaM=
Authentication-Results: spf=pass (sender IP is 81.187.90.236)
smtp.mailfrom=norgie.net; dkim=pass (signature was verified)
header.d=norgie.net;dmarc=pass action=none header.from=norgie.net;
Received-SPF: Pass (protection.outlook.com: domain of norgie.net designates
81.187.90.236 as permitted sender) receiver=protection.outlook.com;
client-ip=81.187.90.236; helo=javelin.dmz.norgie.net; pr=C
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=norgie.net; s=default;
t=1696674085; bh=kfCOi+buphOmNjlX6PTXnDejeHyJ3PZyEHCax0GtE8E=;
h=Date:From:To:Subject:From;
b=QoNkgfFcg6ozZxeqhIg76nJfFLM+CcZE9WVUE5ePnl6fOBDfzBlYaKEvBbbwNvYuC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Content-Disposition: inline
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b:0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: CY4PEPF0000FCC5:EE_|DM8PR01MB6981:EE_
X-MS-Office365-Filtering-Correlation-Id: 091f29c1-e3a2-4e6c-1c3f-08dbc71f2a22
X-LD-Processed: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b,ExtAddr
X-MS-Exchange-AtpMessageProperties: SA
X-MS-Exchange-SenderADCheck: 0
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:81.187.90.236; CTRY:GB; LANG:en; SCL:1; SRV:;
IPV:NLI; SFV:NSPM; H:javelin.dmz.norgie.net; PTR:javelin.dmz.norgie.net;
CAT:NONE;
SFS:(13230031)(4636009)(136003)(346002)(396003)(376002)(39860400002)(64100799003)(451199024)(48200799006)(61400799006)(7636003)(7596003)(356005)(86362001)(55016003)(2906002)(498600001)(5660300002)(8676002)(34206002)(44144004)(7696005)(6966003)(83380400001)(21480400003)(426003)(336012)(6266002)(786003)(70586007)(68406010)(316002)(26005)(2700100001);
DIR:OUT; SFP:1102;
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 07 Oct 2023 10:21:26.4880 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 091f29c1-e3a2-4e6c-1c3f-08dbc71f2a22
X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b
X-MS-Exchange-CrossTenant-AuthSource: CY4PEPF0000FCC5.namprd03.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM8PR01MB6981
X-OriginatorOrg: mitprod.onmicrosoft.com
X-BeenThere: kerberos@mit.edu
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: The Kerberos Authentication System Mailing List <kerberos.mit.edu>
List-Unsubscribe: <https://mailman.mit.edu/mailman/options/kerberos>,
<mailto:kerberos-request@mit.edu?subject=unsubscribe>
List-Archive: <http://mailman.mit.edu/pipermail/kerberos/>
List-Post: <mailto:kerberos@mit.edu>
List-Help: <mailto:kerberos-request@mit.edu?subject=help>
List-Subscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
<mailto:kerberos-request@mit.edu?subject=subscribe>
X-Mailman-Original-Message-ID: <ZSExJFGjyAMYAGGw@lightning.iz.norgie.net>
 by: Mike - Sat, 7 Oct 2023 10:21 UTC
Attachments: signature.asc (application/pgp-signature)

Folks,

In a similar vien to my previous communication, I've found myself trying
to update my principles from 3DES to AES. While this was successful for
the most part, one of the issues that evades me is the correct way to
rekey kadmin/history, as it seems the usual process doesn't work.
Please could someone advise, as I haven't been able to find the Google
foo.

Kind regards,
Mike.

Attachments: signature.asc (application/pgp-signature)
1
server_pubkey.txt

rocksolid light 0.9.7
clearnet tor