Hub/Switch Installation Guide

Chapter 5 HPSS Infrastructure Conﬁguration

HPSS Installation Guide September 2002 247

Release 4.5, Revision 2

• hpss_log

• hpss_ls

• hpss_mm

• hpss_mountd

• hpss_mps

• hpss_mvr

• hpss_ndcg

• hpss_nfs

• hpss_pvl

• hpss_pvr

• hpss_ssm

• hpss_ss

To adhere to the site local password policy, these principals were created with known keys and

subsequently changed with randomized keys. The HPSS keytab ﬁles (/krb5/hpss.keytabs and /

krb5/hpssclient.keytab) hold bothversions of the keys; however, theDCERegistry holds only the

randomized keys.

Periodically, the HPSS administrator should change the passwords in the two HPSS keytab ﬁles.

The procedure to change the passwords is as follows:

1. List the contents of the two keytab ﬁles:

◆ Become root.

◆ dce_login as an entity allowed access to the DCE Registry for changing passwords,

usually cell_admin.

◆ Issue the commands:

% dcecp -c keytab list /.:/hosts/$HPSS_CDS_HOST/config/keytab/

hpss.keytabs

% dcecp -c keytab list /.:/hosts/$HPSS_CDS_HOST/config/keytab/

hpssclient.keytab

2. Update the keytab ﬁles:

◆ For each entry in /krb5/hpss.keytabs do:

% dcecp -c keytab \

add /.:/hosts/$HPSS_CDS_HOST/config/keytab/hpss.keytabs \

-member <entry_name> \