More Cautions
Attackers can get Y2K tickets and then wait for them to become valid in the real world.
- For this reason service keys are not in the Kerberos 2000 database unless the host is specially registered as belonging to the Y2K test.
- The Kerberos service key for Y2K test machines must be changed when the Y2K testing is complete.