Date: | Fri, 06 Apr 2007 13:28:43 -0400 |
From: | Jeff Blaine <jblaine@mitre.org> |
To: | krb5-bugs@mit.edu |
Subject: | Documentation ambiguous |
==== QUOTE ====
To extract a keytab on a KDC called kerberos.mit.edu, you would execute
the following command:"
kadmin: ktadd host/kerberos.mit.edu
kadmin: Entry for principal host/kerberos.mit.edu@ATHENA.MIT.EDU with
kvno 1, encryption type DES-CBC-CRC added to keytab
WRFILE:/etc/krb5.keytab.
kadmin:
==== END QUOTE ====
This first sentence should read:
"To extract a keytab for the principal host/kerberos.mit.edu,
you would execute the following command:"
Here's why: The word usage is ambiguous. The portion "To extract
a keytab on a KDC called kerberos.mit.edu" can be read two ways.
1. "a KDC called kerberos.mit.edu" could mean the hostname of
the KDC is kerberos.mit.edu
2. OR... "called kerberos.mit.edu" could be referring to the
keytab name, so to speak.
To extract a keytab on a KDC called kerberos.mit.edu, you would execute
the following command:"
kadmin: ktadd host/kerberos.mit.edu
kadmin: Entry for principal host/kerberos.mit.edu@ATHENA.MIT.EDU with
kvno 1, encryption type DES-CBC-CRC added to keytab
WRFILE:/etc/krb5.keytab.
kadmin:
==== END QUOTE ====
This first sentence should read:
"To extract a keytab for the principal host/kerberos.mit.edu,
you would execute the following command:"
Here's why: The word usage is ambiguous. The portion "To extract
a keytab on a KDC called kerberos.mit.edu" can be read two ways.
1. "a KDC called kerberos.mit.edu" could mean the hostname of
the KDC is kerberos.mit.edu
2. OR... "called kerberos.mit.edu" could be referring to the
keytab name, so to speak.