Re: kadmin: failing dump/load
Viktor Dukhovni <[email protected]> Sun, 12 Nov 2017 17:17:50 -0500
| Newsgroups | gmane.comp.encryption.kerberos.heimdal.general |
|---|---|
| Message-ID | <[email protected]> |
> On Nov 12, 2017, at 9:08 AM, Henry B (Hank) Hotz, CISSP <[email protected]> wrote: > >> This means that you can not inspect the database >> (short of dumping it with kadmin -l dump) without possibly altering it >> which might not be expected (though I do see the helpful side of being >> able to easily prune keys on demand). The "get" functions DO NOT have side-effects of truncating key history, that only happens on "set". The "get" functions may return a proper subset of the stored keys, but the stored entry remains unchanged. -- Viktor.