Projects/Master Key Migration - Revision history

TomYu at 04:11, 16 February 2010

2010-02-16T04:11:24Z

TomYu at 04:10, 16 February 2010

2010-02-16T04:10:52Z

Wfiveash at 22:11, 29 June 2009

2009-06-29T22:11:06Z

Ghudson: /* Design of implementation */

2009-01-29T19:25:40Z

‎Design of implementation

KenRaeburn: /* Design of implementation */ speling

2009-01-23T23:13:50Z

‎Design of implementation: speling

Wfiveash: /* Testing plan */

2008-10-21T18:50:32Z

‎Testing plan

TomYu: normalize header levels

2008-10-08T15:43:01Z

normalize header levels

TomYu at 22:46, 7 October 2008

2008-10-07T22:46:38Z

TomYu: /* Review */

2008-10-07T17:05:07Z

‎Review

Wfiveash: /* Tasks/milestones */

2008-10-01T20:32:59Z

‎Tasks/milestones

← Older revision		Revision as of 04:11, 16 February 2010
Line 1:		Line 1:
−	{{project-rel\|1.8}}	+	{{project-rel\|1.7}}

	==Desired changes==		==Desired changes==

← Older revision		Revision as of 04:10, 16 February 2010
Line 1:		Line 1:
−	{{project-~~completed~~}}	+	{{project-rel\|1.8}}

	==Desired changes==		==Desired changes==

← Older revision		Revision as of 22:11, 29 June 2009
Line 1:		Line 1:
−	{{project-~~approved~~}}	+	{{project-completed}}

	==Desired changes==		==Desired changes==

@@ Line 100: / Line 100: @@
 ; purge_mkeys [-f] : Delete mkeys from K/M princ that are not used to protect any principals.  With -f, does not prompt user.  The prompt will be "Delete version 3 master key for the FOO.COM realm? [y/n] ".
-; sync_stash [-f] : Sync up the set of keys in the keytab stash with those in the K/M princ entry in the KDB.  Keys in keytab stash not found in K/M will be removed.  With -f, does not prompt user.
+; sync_stash [-f] : Sync up the set of keys in the keytab stash with those in the K/M princ entry in the KDB.  Keys in keytab stash not found in K/M will be removed.  With -f, does not prompt user.  (NOTE: During implementation, this was changed to just use the preexisting "stash" command when a stash file is already present.)
 ; update_princ_encryption [-f] [expression] : Use current mkey to encrypt principals (other than K/M) secret keys if not already encrypted by that mkey.  Should support either doing all princs if no argument given or a subset specified by expression (supports shell-style globbing, similar to kadmin).  Both the principal's secret keys and key history will first be decrypted with the original encrypting mkey then encrypted with the current mkey.  If the current mkey kvno is that of the mkey that originally encrypted the principal's keys the code will stop processing that principal and go on to the next.  With -f, does not prompt user.

@@ Line 96: / Line 96: @@
 ; use_mkey <KVNO> [startdate] : Set the current mkey KVNO.  This controls which master key is used when encrypting principal keys.  The kadmind and krb5kdc should be restarted after this command successfully completes.
-; list_mkeys : Shows all masterkeys from most recent to earliest in K/M principal.  The output will show the KVNO, enctype and salt for each mkey similar to kadmin getprinc output.  A * following an mkey denotes the current mkey.
+; list_mkeys : Shows all master keys from most recent to earliest in K/M principal.  The output will show the KVNO, enctype and salt for each mkey similar to kadmin getprinc output.  A * following an mkey denotes the current mkey.
 ; purge_mkeys [-f] : Delete mkeys from K/M princ that are not used to protect any principals.  With -f, does not prompt user.  The prompt will be "Delete version 3 master key for the FOO.COM realm? [y/n] ".
@@ Line 102: / Line 102: @@
 ; sync_stash [-f] : Sync up the set of keys in the keytab stash with those in the K/M princ entry in the KDB.  Keys in keytab stash not found in K/M will be removed.  With -f, does not prompt user.
-; update_princ_encryption [-f] [expression] : Use current mkey to encrypt principals (other than K/M) secret keys if not already encrypted by that mkey.  Should support either doing all princs if no argument given or a subset specified by expression (supports shell-style globbing, similar to kadmin).  Both the principal's secret keys and key history will first be decrypted with the original encrypting mkey then encrypted with the current mkey.  If the current mkey kvno is that of the mkey that originaly encrypted the principal's keys the code will stop processing that principal and go on to the next.  With -f, does not prompt user.
+; update_princ_encryption [-f] [expression] : Use current mkey to encrypt principals (other than K/M) secret keys if not already encrypted by that mkey.  Should support either doing all princs if no argument given or a subset specified by expression (supports shell-style globbing, similar to kadmin).  Both the principal's secret keys and key history will first be decrypted with the original encrypting mkey then encrypted with the current mkey.  If the current mkey kvno is that of the mkey that originally encrypted the principal's keys the code will stop processing that principal and go on to the next.  With -f, does not prompt user.
 The kdb5_util dump -mkey_convert will be modified to update the

@@ Line 124: / Line 124: @@
 Unit testing of all new and modified commands will be done to verify
 they work as specified.  This will be done for both the db2 and LDAP KDB
 The kadmind and krb5kdc daemons will be tested to verify they work
@@ Line 132: / Line 138: @@
 Bounds testing will verify the krb utils and daemons work properly when
-the MKVNO wraps back to 0.
+the MKVNO wraps back to 1 (0 is not a valid value).
 The existing MIT Kerberos test suites will be run to make sure there are
 no regressions introduced by this project.
 ==Review==

@@ Line 1: / Line 1: @@
 {{project-approved}}
-=Desired changes=
+==Desired changes==
 This project will provide the ability to add a new master key (with an
@@ Line 9: / Line 9: @@
 deletion of master keys will be provided.
-=Functional Requirements=
+==Functional Requirements==
 The KDC must be able to deal with multiple master keys and determine
@@ Line 39: / Line 39: @@
 * Purge unused master keys (keys not used to protect any principal).
-=Design of implementation=
+==Design of implementation==
 Fundamentally the current implementation must be changed to support
@@ Line 109: / Line 109: @@
 will be updated to include the new mkey used for the conversion.
-=Tasks/milestones=
+==Tasks/milestones==
 * project start.  Aug 29, 2008
@@ Line 118: / Line 118: @@
 * documentation.  ~3 day
-=Desired integration and release goals=
+==Desired integration and release goals==
-=Testing plan=
+==Testing plan==
 Unit testing of all new and modified commands will be done to verify

← Older revision		Revision as of 17:05, 7 October 2008
Line 151:		Line 151:

	===Approvals===		===Approvals===
		+
		+	#[[User:TomYu\|TomYu]]

	===Discussion===		===Discussion===

@@ Line 113: / Line 113: @@
 * project start.  Aug 29, 2008
 * project review.  ~2 week
-* Implementation.  ~8 week
+* Implementation.  ~6 weeks
 * test.  ~4 week
 * code review.  ~2 week