Migrating to a Newer Version of the Kerberos Server

Migrating from Kerberos Server Version 2.0 to Version 3.0

 

 

# kdb_dump -f /opt/krb5/dumpfilev2.0

Step

2.

Copy the dump file to the system on which you are installing the v3.0

 

 

Kerberos server

Step

3.

Install the v3.0 Kerberos daemons on the new system.

Step

4.

Configure the Kerberos server v3.0.

 

 

 

NOTE

 

Ensure that the following values are the same on both the versions of the

 

 

Kerberos server:

 

 

•

Realm name

 

 

•

Master key name

Ensure that the master key password is identical to the one that was used in v2.0:

# krbsetup

The instance-based policy applies if you do not subscribe principals to a specific policy.

You can configure the Kerberos server manually or by using the krbsetup tool. This is an interactive tool that prompts you for the required parameters. For more information, type man 1M krbsetup at the HP-UX prompt or see “Auto-Configuration of the Kerberos Server” on page 63.

Step 5. Load the dump file generated in step 1 using the following command:

#kdb_load -f<dump_filename>

On successful completion, the following message is displayed:

Load Successful

Now, the migration process of the principal information is completed.

48

Chapter 3