Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!uunet!snorkelwacker.mit.edu!apple!agate!shelby!MIT.EDU!jon
From: jon@MIT.EDU (Jon A. Rochlis)
Newsgroups: comp.protocols.kerberos
Subject: Re: Database Frobbing (was Re: What are a principal's attributes used for?)
Message-ID: <9012151934.AA12287@delwin.MIT.EDU>
Date: 15 Dec 90 19:34:10 GMT
References: <10134@darkstar.ucsc.edu>
Sender: news@shelby.stanford.edu (USENET News System)
Organization: Internet-USENET Gateway at Stanford University
Lines: 24


   >
   >Other than that we generate the dump files, awk/sed/join them to our
   >hearts content and then reload.  If you've got a slave then you don't
   >need to have any downtime.
   >
   What kinds of things are you doing when you do these operations?
   We're still on the threshold of worrying about how to run an Athena
   installation; and most of the operational system-administrator-type
   procedures seem to be all in people's heads.

About the only time we do such things is to remove user's who have
graduated.  We move the user's who don't show up on the registrar's
tape into the "deactivated" state in Moira.  After enough time goes by
for correcting mistakes, we remove the users from Moira (and generate
a script to nuke their disk space, etc.).  Given the list of nuked
users we awk/join whatever them out of the kerberos database.  That's
about it.  Doesn't happen often.

We have also gone through and fixed expiration times en masse (some early
programs created principal's with expiration time of now + 2 or 3
years).  

		-- Jon