X-Git-Url: https://sipb.mit.edu/gitweb.cgi/wiki.git/blobdiff_plain/b709f5d23a17604789c1bd315a5a074f7644da56..4b45457ad4f3db1590fcc93f02fdaf73cfb30bf9:/doc/root-instance.mdwn

diff --git a/doc/root-instance.mdwn b/doc/root-instance.mdwn
index b776cfa..b53a8ac 100644
--- a/doc/root-instance.mdwn
+++ b/doc/root-instance.mdwn
@@ -62,7 +62,7 @@ have developed shell scripts to make it easy to switch between them.
  * nelhage has the [krbroot
    command](http://web.mit.edu/nelhage/Public/krbroot), with which you
    use syntax like "krbroot ssh linerva" when you want to use your
-   root instance for a command. You can also "krbroot shell". adehnert [mildly extended it](http://web.mit.edu/adehnert/Public/software/my-snippets/krbroot) to add a `krbroot screen` subcommand and use `ATHENA_USER`.
+   root instance for a command. You can also "krbroot shell". adehnert [extended it](https://www.dehnerts.com/gitweb/?p=user/alex/software/my-snippets.git;a=blob;f=krbroot;hb=HEAD) to add a `krbroot screen` subcommand, use `ATHENA_USER`, and support arbitrary principals.
 
  * quentin and broder wrote [kdo](http://web.mit.edu/snippets/kerberos/kdo),
    which is similar in spirit to krbroot, but designed for Mac OS
@@ -109,7 +109,7 @@ be sure to ask for a pts id, if you want to use your tickets with AFS.
 
 You should change your root instance’s password with a command like this, to upgrade your key from critically weak DES encryption algorithm to strong AES encryption:
 
-    kadmin -p andersk/root -q 'cpw -e aes256-cts:normal -e aes128-cts:normal andersk/root'
+    kadmin -p andersk/root -q 'cpw -e aes256-cts:normal,aes128-cts:normal andersk/root'
 
 (Note: This previously made your password incompatible with a [handful of services](http://debathena.mit.edu/trac/ticket/529) that you should not have been using with your root instance in the first place, but these services have now been fixed.)  You can confirm the change with