Query regarding dfc.keystore and wdk.keystore

subirrastogi

Hi,

I am using DFC 6.5sp2 and webtop 6.5sp2 and my knowledge about dfc.keystore and wdk.keystore is very limited and I have few questions regarding these files:

1. I would like to understand how and when these files are used during authentication.

2. I have read it in some other post and would like to confirm, are these files -dfc.keystore and wdk.keystore are host/IP specific? My understanding is these are NOT host/IP specific as these files contains the private key and are needed to decrypt the encrypted passwords. Is my understanding correct?

3. My requirement is : For principal authentication, super user password is encypted using new DES algorithm on say a host-A. Now on host-B (another DFC instance), I want to use the same encypted password to connect to same docbase. So to achieve this, I think I have to use the same dfc.keystore and wdk.keystore files which were created on host-A. Is this correct?

Thanks in advance.

lastnitescurry

The files are generated if they do not exist. Yes they do depend on the IP address of the host. So changing the IP of the host will cause authentication failures. Error message something like DFC_PRINCIPALED_SECURITY_FAILURE. They can be deleted and will be recreated and work with new IP.

for 1... no idea of details... just know how to stop it annoying me

for 2... I am right you are wrong

for 3... no idea but at a guess you are wrong